496be7d1423afcdbe32944b72d5d4f7fed17e9f7c5f2f0c45e5c9c672f830a2a

Analysis

max time kernel
133s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01/11/2022, 10:44

Target
Which_sentence_has_proper_subject-verb_agreement (sede).js
Size 67KB
Sample221101-mss7bsbaa7
SHA256 c5bb018dc8c92fe64e8a48a41e09a4d00a9645ae3fbaa76760529cf5d6160168
MD5 ca60fea7eda705c45b49e70c054d0945
SHA1 b2d41c7d1874f07978db65de9b070f8762a3ba91
SHA512 2c3a8b27fd84cc9b8293a461854f0d43bc8a8f7b84bec5f24c46baefb116352813cb32f98abd70f08ea6cbb10a3ce67262f8b219e431ba21007d1643301fbead
SSDEEP 1536:q4YC5uTfL+02KtxvfLKtrUNmjg812NNT7PmJmLPAdaUX:ufL+02+fLKCAjgQ8/0aUX
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
36	2324	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	36	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Which_sentence_has_proper_subject-verb_agreement (sede).js"
1⤵
- Blocklisted process makes network request
PID:2324