02cd4ea997bbaad37b7aa99971c2b623a1ff9ee615c47b35ecd641ae950c1988

Analysis

max time kernel
94s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
19/05/2023, 01:48

Target
susp.js
Size 21KB
Sample230519-b759naee34
SHA256 02cd4ea997bbaad37b7aa99971c2b623a1ff9ee615c47b35ecd641ae950c1988
MD5 98ee3c498fa4ef69a09b7f84f092cbdd
SHA1 99e1e21ba11f4223f507b3be1bfcb3c32cb9ce5c
SHA512 b3b746ff380087bd98d5eeecd98fd97254b80625b36a2451781a71e143e51c1ce4f387cc431666c42c6f72a00d534847a321c5384ed6883457ca88ecbf0a6584
SSDEEP 384:j03wqvR/MfljeBiMBC7b+jH0U3puaL02kECO:jOwqvR/yjQii+KH0U3plL4ECO
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	1712	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	2	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\susp.js
1⤵
- Blocklisted process makes network request
PID:1712