ccb2cb9b625490c25ad498b2ffebce7aa7b0313b227c23e556f7c6118cd4d281

Analysis

max time kernel
52s
max time network
41s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
22/04/2023, 01:47

Target

9036f9b1e55295e3cf93ba06e905e1aacefc7b115895a434492f8a83359ee1e1.wsf
Size

77KB
MD5

c1761172e5fb5e2db0ca6672a0967f0d
SHA1

e596c209e8114f47edff21a9384be00546d8edb2
SHA256

9036f9b1e55295e3cf93ba06e905e1aacefc7b115895a434492f8a83359ee1e1
SHA512

73c2a2cfc4c447c39892027bbc2c837ede47e373df5b52c0449f0dec3b176eb2db976a2bced4500f27230fe29fd1349d97c5732025b344e62506eb2dc2850a99
SSDEEP

1536:Kj/tQlaC6s97mwoOvUGmIg1JF5r8S/p3q22r:Kj/tQ8Ds97QO8GmIgvP/ZqDr

Score

8^/10

Blocklisted process makes network request 2 IoCs

flow	pid	Process
3	1060	WScript.exe
4	1060	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\9036f9b1e55295e3cf93ba06e905e1aacefc7b115895a434492f8a83359ee1e1.wsf"
1⤵
- Blocklisted process makes network request
PID:1060