cef4fb0a13cee35450689a669e7dcfc81b6402c527397d77ceed2ce51a89eecb

Analysis

max time kernel
135s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
23/03/2023, 14:33

Target
Fattura 3567 2023-300934.js
Size 6KB
Sample230323-rwvxjsab8s
SHA256 123bda1a6cedf72acd51a01f40ed32ea1e61d610ff46a05a6a7166c0777f6a8c
MD5 841dda82907088cfda33303916fb2d05
SHA1 0d239fea1df46a3cca0cae388ae0adebcbe12dd0
SHA512 bedc05f44aa7164b2fc64664bb3bf78e5e7338edbbfeefb2be5f9479c00890b786765c47e368f5d038a1e4ee973a542049c873288d089f91fa2ec541e886e303
SSDEEP 192:M/fnUwLR8EzDM9a9gJ3txMjHEUfSUGfPLrFaLc:dY4qf4n/
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	1344	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	2	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Fattura 3567 2023-300934.js"
1⤵
- Blocklisted process makes network request
PID:1344