12e40b7a3fb60d6e81a1107f49c1bc8c696adfe27fd1a8710f759373e2fc44ce

Analysis

max time kernel
146s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
23/03/2023, 12:48

Target
Fattura 3555 2023-300922.js
Size 6KB
Sample230323-p1sa4sff87
SHA256 4016c0c592d893396bec7ed3ac9897f20d90cd996e6f5fcba2bfc0bbe8571e04
MD5 7e2e5850b42df62d2f3f1f0f9292ccd6
SHA1 b84cc18f004d1137cf275878f6604c4c3a89d783
SHA512 bcbd93406e11b54f6b04e59f724b34f951801f82cbe197f52bc4aeb21191f0f94007d389c734964e31dbc9eba37cebd224b8de3ab86947a082b98f1f528428ca
SSDEEP 192:M/fnUwLR8EzDM9a9gJ3txM+m53zbfPLrFaLc:dY45+nn/
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
13	3164	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	13	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Fattura 3555 2023-300922.js"
1⤵
- Blocklisted process makes network request
PID:3164