Resubmissions

24-11-2022 01:33

221124-byys8aaa97 10

23-11-2022 13:44

221123-q1t1dafd39 8

Analysis

  • max time kernel
    40s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 13:44

General

  • Target

    4_6048434599929842876.js

  • Size

    9KB

  • MD5

    f0d8c4e88c78cb534e1bf4df33cd0edf

  • SHA1

    56e576823ce200a5d079b245cec26c4e1af71b4b

  • SHA256

    392d3c413e8ea60cd0c8ec8876f0ff381aac710dce9ccb7f0f3432117582ee89

  • SHA512

    25601825fd6b756aa65f84ab3bbf7f9ed3b953ea77d26b36fbeb91979c3d8abd0f655a9ace4f0510073a890c1fada5bd147a71bca6a563aa01c1dd66d1150082

  • SSDEEP

    192:gRwZrQjrWzVD3CxZRfVjl/yzrPKs3RuHLKyJW7X1Kz5uMYICz5uaYzZ46Qz5IaYr:vZQjrWo3/ySa42yYFNaxSr+uai01z7U0

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 4 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\4_6048434599929842876.js
    1⤵
    • Blocklisted process makes network request
    PID:1424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1424-54-0x000007FEFBD11000-0x000007FEFBD13000-memory.dmp

    Filesize

    8KB