97aa441e8b104661a633d705fe16af3ae24dd645e8ae96c1be21eae69d353092

Analysis

max time kernel
135s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
19/05/2023, 10:03

Target
1 Total New Invoices - Wednesday May 17 2023_1066.js
Size 75KB
Sample230519-l3cfwsdc26
SHA256 21c2aa44f853b35566bb5fbe52a38d921a8f30a6a23f3eab118e8707ebb46d97
MD5 f4756e8439833f67c6d62cb06b7817fe
SHA1 033c98dcb61078d2f90a30f99270ec68ee2db4b7
SHA512 8d441bfcade1a41a4e720ee2a591e3c97d8ba7a3969694ea8877c2167ca3983978f9a10f3f859fbe78ec9e1e9efb135d567a342f482f4f35503e1dd10cead094
SSDEEP 1536:CVcbnCM4RftXJucI9+XD27vEAOmLK8X8+CtiB:t54VtXME9GBmiB
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
4	4652	wscript.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	4	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\1 Total New Invoices - Wednesday May 17 2023_1066.js"
1⤵
- Blocklisted process makes network request
PID:4652