0693aae93b75d9d600134e0a271210ef7622a96beca9c15a0cc86f4622e8aa53

Analysis

max time kernel
28s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
25-01-2023 11:50

Target

0693aae93b75d9d600134e0a271210ef7622a96beca9c15a0cc86f4622e8aa53.js
Size

24KB
MD5

6c6cd5cc756706d8fb8e961d05905c94
SHA1

99bc02cf10aaebef3a5a4282affaec3d9f8bb305
SHA256

0693aae93b75d9d600134e0a271210ef7622a96beca9c15a0cc86f4622e8aa53
SHA512

1137945526e8f470a1a06bb25e1591312d02b82948b00dbdd25f995a37068c1af9cd0a5fd7155c8cebc30a8f86336861b4042a7e7fa5f984082dc4469f0902ad
SSDEEP

384:vDubPsZOzYKE813OIhxIEKwfc5uFWT4VSbRTNsaRDNCOuwUyO9FO1lQc:vD0k8lOI/IExc5EWTB9fRNCOu1nPO1+c

Score

8^/10

Blocklisted process makes network request 1 IoCs

Processes:

wscript.exe

flow pid process

4 2032 wscript.exe
Executes dropped EXE 1 IoCs

Processes:

pid process

1276

flow	pid	process
4	2032	wscript.exe

pid	process
1276

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\0693aae93b75d9d600134e0a271210ef7622a96beca9c15a0cc86f4622e8aa53.js
1⤵
- Blocklisted process makes network request
PID:2032

\Windows\System32\wscript.exe
Filesize
165KB

MD5
8886e0697b0a93c521f99099ef643450

SHA1
851bd390bf559e702b8323062dbeb251d9f2f6f7

SHA256
d73f7ee4e6e992a618d02580bdbf4fd6ba7c683d110928001092f4073341e95f

SHA512
fc4a176f49a69c5600c427af72d3d274cfeacef48612b18cda966c3b4dda0b9d59c0fe8114d5ed8e0fec780744346e2cd503d1fd15c0c908908d067214b9d837

Download Submit
memory/2032-54-0x000007FEFC451000-0x000007FEFC453000-memory.dmp

Filesize
8KB

Download