6327980bf380ad765b53f7b3411471c9069e0ad2a7ec3f247b8a8bd3fc8b6fde | Triage

Resubmissions

28-11-2022 21:48

221128-1nxwlscc61 8

25-11-2022 19:22

221125-x297bacf7x 8

Analysis

max time kernel
159s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:22

Sharing

Report Analysis Logs

General

Target

AutoUpdate.js
Size

24KB
MD5

856d212b5bc1f4ac238d8812832fac85
SHA1

0da7f102f13f405ea74a1c62885f090183a26b01
SHA256

f03cb5c611103d657ef2d5c5cb11cb2550405c703b8911b6b9f00fb872472498
SHA512

2d19ab718a853c542051144243747a5a1a5a6f9c355abb937b872f1ffbc513c77f4789f776355b763e8ceecbd7fbefe469edecb89dd8f580d81844a364e67ae0
SSDEEP

768:kxN+BoCblOI/IExc5EWTB9fRNCOu1nPO1+c:6FoIl+Wcnq

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 5 IoCs

Processes:

wscript.exe

flow pid process

23 4092 wscript.exe
25 4092 wscript.exe
27 4092 wscript.exe
29 4092 wscript.exe
57 4092 wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\AutoUpdate.js
1⤵
- Blocklisted process makes network request
PID:4092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...