e1335db6cbda410887c0da7a16a717ad50a685380c4c1262ed6d6b374af073c0 | Triage

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
23/03/2023, 13:14

Sharing

Report Analysis Logs

General

Target

Fattura 3562 2023-400929.js
Size

6KB
MD5

d1525ede28ff7a74d5565cd293904903
SHA1

7b10735a32ed119f3abdf73983a4c9141f0e5fd1
SHA256

e1335db6cbda410887c0da7a16a717ad50a685380c4c1262ed6d6b374af073c0
SHA512

470382637e71ed19e794a9ab37b9ee92d4977d1d79925293cdd81fdb2799d79b082ad848f20fd184e8f51b194c6df52fddb118d0eeebccbdb6d1908414a50a02
SSDEEP

192:M/fnUwLR8EzDM9a9gJ3txMErhun9jqWpfPLrFaLc:dY4p0ZJpn/

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	1444	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	2	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Fattura 3562 2023-400929.js"
1⤵
- Blocklisted process makes network request
PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads