793786512caaebdbc844190f8dd424c0f3af7adbf6c593d6ac5bd502c543961b | Triage

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
23/03/2023, 13:30

Sharing

Report Analysis Logs

General

Target

Fattura 3567 2023-400934.js
Size

6KB
MD5

548feb99e9ac3da410fc8ee0e7cff461
SHA1

09064face8d5a7449eedcf62f95ffe2551c4eae8
SHA256

78668f256b67a4e48db0cca31862f0eca33012348f017c421c00887a9b8e5ff2
SHA512

6dd33fa52a99e71382aef8e18b0d3d27634da16764ad975af7f6b6da7281ea8897b530ef21540ded2cd84c4001f29d323f07a028bff801c5b16903bf81a0bbde
SSDEEP

192:M/fnUwLR8EzDM9a9gJ3txMtiN7fPLrFaLc:dY4Mi5n/

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	1336	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	2	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Fattura 3567 2023-400934.js"
1⤵
- Blocklisted process makes network request
PID:1336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads