349d47be4a38242b25549567438628126f32f8ab236762d804b578bcbadbaeff

Analysis

max time kernel
102s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
23/03/2023, 13:30

Target
Fattura 3586 2023-300953.js
Size 6KB
Sample230323-qrtcgsga49
SHA256 9e9bbcc818ebd460f4f0d7f66a32142427232a2f42316c93ee65d809c0e0927f
MD5 069f8ce804df7ea844d09777f28efd56
SHA1 b3b90d5f33ce6ba0c3fdd8b34cd96bb32dd63732
SHA512 7b10351a31745c388d99a6e5695b4f5cf6941ec02e3adc6b9568ce5f82af91120c93de29aadfd527fdfbba97043c03902937eab490458cb7105a38d92e44d1e3
SSDEEP 192:M/fnUwLR8EzDM9a9gJ3txMIXsp/bJf69IEusM44fPLrFaLc:dY458p/bQf4n/
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
13	1508	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	13	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Fattura 3586 2023-300953.js"
1⤵
- Blocklisted process makes network request
PID:1508