Analysis

  • max time kernel
    148s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-10-2022 07:05

General

  • Target

    Which_sentence_has_proper_subject-verb_agreement (cs).js

  • Size

    67KB

  • MD5

    1e2c6602582a82ddf3f711399c5ea49e

  • SHA1

    d3a5e967d1e89e17994d5db360ff3cd13322c9ba

  • SHA256

    e7dd7d867c684c68874a8b7a25b75e2f0a6117297f439c5e1f493c0a842de6e9

  • SHA512

    510b5d7c35d80fd22c2fb8845dda42d76b678eb190326e8008ad3c16eea602c85e654e3089042c92d6d734705b9599de507cb1b718d642cfe817288c4d5a199b

  • SSDEEP

    1536:n4YxdtpwwvzNt1hsnmtrUzXNRKQN54pPQJVcMARaUm:RpwwvzPsnmCLNRsJpaUm

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 3 IoCs
  • Script User-Agent 3 IoCs

    Uses user-agent string associated with script host/environment.

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe "C:\Users\Admin\AppData\Local\Temp\Which_sentence_has_proper_subject-verb_agreement (cs).js"
    1⤵
    • Blocklisted process makes network request
    PID:864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads