8d0192f762385efbaced4fddc36228d67e8bdb06e41554dbefa508128f1fdc3a

Resubmissions

13-02-2023 10:09

03-12-2022 14:47

max time kernel
24s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
13-02-2023 10:09

Target

lease agreement for illinois 88314.js
Size

318KB
MD5

8a99ecf05b5285b228b60131c289b606
SHA1

a4549ddcdb55d58c3ad6c69ebc82f53965c397ae
SHA256

8d0192f762385efbaced4fddc36228d67e8bdb06e41554dbefa508128f1fdc3a
SHA512

2eeaf44eeceba4f6cdabcc7feec40f2063b225f00d2b9aee4886a8ecd97099229ddcb6a7dd93a6c5b1d4ef7abcf7a4e5e7c32f55217f35ce7782b093f14d4b71
SSDEEP

6144:zJeV3fhXsZocf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PC:zJIEw4mDiTFyA6TVfMAKNZC

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1204	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\lease agreement for illinois 88314.js"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1204