Overview

overview

8

Static

static

1

RIMESSA_CA...619.js

windows7-x64

8

RIMESSA_CA...619.js

windows10-2004-x64

8

Analysis

  • max time kernel
    30s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    21-03-2023 13:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    RIMESSA_CASSEGNI0321023_7619.js

  • Size

    6KB

  • MD5

    2915ff4a85b6eb5a0f9a889933cd3f9e

  • SHA1

    f22eed1a2598a0e274d1033df6a73346c8a8863e

  • SHA256

    2c642cfd02efb4d79c6dd137684c3f55f7a1a8046c7c4681061b2cb21ecf7bbd

  • SHA512

    017170dfcce69286f6b8e4728a93107c8e92981942c02f2656bc4c5ded52ec3d477a612063901593f95ca787d8f4ad06ae12deb44bcf3e2ed9f968e2eb8f56fa

  • SSDEEP

    192:M/fnUwLR8EzDM9a9gJ3txMzXQD3NfMd9MNfPLrFaLc:dY4WADBqsn/

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 1 IoCs
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\RIMESSA_CASSEGNI0321023_7619.js
    1⤵
    • Blocklisted process makes network request
    PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads