2c642cfd02efb4d79c6dd137684c3f55f7a1a8046c7c4681061b2cb21ecf7bbd

Analysis

max time kernel
134s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
21/03/2023, 13:52

Target
RIMESSA_CASSEGNI0321023_7619.js
Size 6KB
Sample230321-q6dwcaag75
SHA256 2c642cfd02efb4d79c6dd137684c3f55f7a1a8046c7c4681061b2cb21ecf7bbd
MD5 2915ff4a85b6eb5a0f9a889933cd3f9e
SHA1 f22eed1a2598a0e274d1033df6a73346c8a8863e
SHA512 017170dfcce69286f6b8e4728a93107c8e92981942c02f2656bc4c5ded52ec3d477a612063901593f95ca787d8f4ad06ae12deb44bcf3e2ed9f968e2eb8f56fa
SSDEEP 192:M/fnUwLR8EzDM9a9gJ3txMzXQD3NfMd9MNfPLrFaLc:dY4WADBqsn/
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
4	628	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	4	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\RIMESSA_CASSEGNI0321023_7619.js
1⤵
- Blocklisted process makes network request
PID:628