72e653c7202036d468f0452258a689def3d4f2c3ad4c1c67d06a7e62961ef3c0

Analysis

max time kernel
137s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 08:17

Target

Which_sentence_has_proper_subject-verb_agreement (iwwcb).js
Size

67KB
MD5

787dd0c9930d6e570955715e7bc95bae
SHA1

f4535a7f2e431edb21ccbcf3dc7054fe80bfe5f3
SHA256

4b0ada9cbb7364176bad66d81d9b1042148a4c43ba3f1823f738f30bbea1c78c
SHA512

7c93b35882eca96a50b66430e197824b7f7ddecd969122b741037d50cb7c4e2dca315456a9c02fe4b078a7b52978d9657f08a33b69524c0b40f9f2c1173cbe3b
SSDEEP

1536:q4Y9SdCfwOrnNtej/2btrUNOgRPUcdBPQJ92juuaUX:2fwOrn0/2bCYgRlpaUX

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
39	4264	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	39	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Which_sentence_has_proper_subject-verb_agreement (iwwcb).js"
1⤵
- Blocklisted process makes network request
PID:4264