db49953cc2ba54a1ee63afdf474cbf5f07c0b91aecb0560243dfacd37b74ea0e

Analysis

max time kernel
135s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
23/03/2023, 14:18

Target
Fattura 3565 2023-300932.js
Size 6KB
Sample230323-rl9yqagb95
SHA256 db49953cc2ba54a1ee63afdf474cbf5f07c0b91aecb0560243dfacd37b74ea0e
MD5 49b387fafdc3645ac4d02e1452b2cd3e
SHA1 e37f043e40af84268a9fc45823a8a23b4b6cb2b0
SHA512 33e16f71ffa5fe1ea60fa4e2d12282b3b198eea5c3654ecb294642b1a4c19c645f1e8e365134b151a6c9d934b5b24206805385da013abac826506ad7a0107b67
SSDEEP 192:M/fnUwLR8EzDM9a9gJ3txMSaXaaWfPLrFaLc:dY4VwWn/
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
4	2968	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	4	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Fattura 3565 2023-300932.js"
1⤵
- Blocklisted process makes network request
PID:2968