182bb1afe6562279ccb29e3ec6e1aa15caf7ac62c1b25a75f6981887637550a7 | Triage

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
09-09-2022 13:26

Sharing

Report Analysis Logs

General

Target

MXoye8l.z2Xb.i8.js
Size

118KB
MD5

2eb17caa422a2097364e6fcb9c4251dd
SHA1

fba2528723a42314600bf4a10496ae840fa475e2
SHA256

182bb1afe6562279ccb29e3ec6e1aa15caf7ac62c1b25a75f6981887637550a7
SHA512

3ece1c441ae3878cb220e416e0ee8b9ac88ea1bfeb1bf247cb0336d4d40e70afc18f1b4124c5d0ca3c5ab85cc4460e2457c67ff00543fc2619056571ad67a09c
SSDEEP

3072:DYAInlJ7Mb5z4Wh5q8RHzgaDFc2PeJjt:DYAIlJolz4W/bJDWWeJjt

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

Processes:

wscript.exe

flow pid process

4 1652 wscript.exe
5 1652 wscript.exe
6 1652 wscript.exe
7 1652 wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\MXoye8l.z2Xb.i8.js
1⤵
- Blocklisted process makes network request
PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1652-55-0x000007FEFBE11000-0x000007FEFBE13000-memory.dmp

Filesize
8KB

Download