8dbf855ca5768a5b88a62f4b9354c35c4bcd9557aced6bf19ad84e8c148b6203

Analysis

max time kernel
138s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-10-2022 23:06

Target

Which_sentence_has_proper_subject-verb_agreement (uil).js
Size

67KB
MD5

39acfc3cc0c9176ba3960ac3a8f3b55b
SHA1

b3db7069099205a969002cdc315508397bde12c7
SHA256

0c2f1d1bf7cbc72d34e84c396d141ec4947c66bd09b37149ab253ba613e69bd2
SHA512

9b0eb4624d2bcee1e42767e2beeeaf0167d887a02cf9e3164813f5a5667bc83923098cb734645675f56e7666369c813de9914377315438d6b6601c271bfb722b
SSDEEP

1536:I4YHQyfwkd2Kt09O2xPtrUKAYzB/fRBPQJ9ITYAyaUX:sfwkd2lO2xPCLYzxAaUX

Score

8^/10

Blocklisted process makes network request 3 IoCs

Script User-Agent 3 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	37	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	39	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	41	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Which_sentence_has_proper_subject-verb_agreement (uil).js"
1⤵
- Blocklisted process makes network request
PID:544