Analysis
-
max time kernel
138s -
max time network
318s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
11-10-2022 11:46
Static task
static1
Behavioral task
behavioral1
Sample
7254c234f9175d1324a930fa239974c390c1ca8762a7fa16198ac73279416091.js
Resource
win10-20220812-en
windows10-1703-x64
2 signatures
300 seconds
General
-
Target
7254c234f9175d1324a930fa239974c390c1ca8762a7fa16198ac73279416091.js
-
Size
39KB
-
MD5
3b2f55eadda4eaa7c046663db458ea9f
-
SHA1
83fbe66b23f517976e8dee400a12630762894d0e
-
SHA256
7254c234f9175d1324a930fa239974c390c1ca8762a7fa16198ac73279416091
-
SHA512
fc24e3f32bc3ef27730480561a1f3171a783cb26a919c330b164be3785530542e7cd0d8b02fd82ea8dc0c6ae7ecad86428843183591899953986b544bba9fe1f
-
SSDEEP
768:E25Co/GC2IXrs7VbRRXqVsnQZbvzvOsuytrO+gHbhQlek:Ee2erCMVJi7ilek
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 3 IoCs
flow pid Process 7 4608 wscript.exe 9 4608 wscript.exe 11 4608 wscript.exe -
Script User-Agent 3 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 7 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) HTTP User-Agent header 9 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) HTTP User-Agent header 11 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)