2b092ab4322d4b6cb4d3eb24bb2463847e0b60e77d9e979b4c30acf34dba2ba8

Analysis

max time kernel
196s
max time network
200s
platform
windows10-1703_x64
resource
win10-20220901-en
resource tags

arch:x64arch:x86image:win10-20220901-enlocale:en-usos:windows10-1703-x64system
submitted
29/10/2022, 15:18

Target

Parks_canada_tentative_agreement (fni).js
Size

67KB
MD5

cf40c6dcccdb1cdc1406d1efa00b00fc
SHA1

4b2fc3182526c33264736a4bbf01baf1ff5a2fc7
SHA256

2b092ab4322d4b6cb4d3eb24bb2463847e0b60e77d9e979b4c30acf34dba2ba8
SHA512

0bd2e8f3619f917cd88642a7fb6bd6327ca8dd8801cfc674300e0f8762dc74d4ed10ca145077055bc64d03b7355ec635b50b804447fa38917b307807d2860124
SSDEEP

1536:k4YMtgfwkO2Nt6EEMctrUndFRkWiT6POJ9OCAaaUX:kfwkO29EMcCdFR/GaUX

Score

8^/10

Blocklisted process makes network request 3 IoCs

Script User-Agent 3 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	7	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	9	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	11	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Parks_canada_tentative_agreement (fni).js"
1⤵
- Blocklisted process makes network request
PID:3336