1a278fa43ce5b287c52b263165cf1e923ae0f1738a8a89088de9ef19fdbf8bfe

Analysis

max time kernel
114s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
23-03-2023 13:16

Target

Fattura 3566 2023-400933.js
Size

6KB
MD5

92c2b60a06ef1627ef2be1379e6c4642
SHA1

110a40ac9ac65f9d4eed32e68f580dca2abaf537
SHA256

1a278fa43ce5b287c52b263165cf1e923ae0f1738a8a89088de9ef19fdbf8bfe
SHA512

74e03e20ebf4b1990a1c4abc02cd09e1eed83458cedc5c4467ad79ba452707e2ebd750a2b9a46c673e64d754314bbb822f3339d64b5747145e3b4c9a7b445b94
SSDEEP

96:M/fnUwLUK8EzDM9ax9gJ3t5fUBkJFz0GqpbqfhhLrGiaUSc:M/fnUwLR8EzDM9a9gJ3txMvufPLrFaLc

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	4972	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	2	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Fattura 3566 2023-400933.js"
1⤵
- Blocklisted process makes network request
PID:4972