3628879ea59a4964b27d1e795c4b2af22dd1622727c9a1524b483bdf2576f350 | Triage

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
17-06-2023 05:55

Sharing

Report Analysis Logs

General

Target

ORDER-234478F_List.pdf.js
Size

7KB
MD5

0ab27c39f953786426a1814c3d78e273
SHA1

c2dafee3036af7f6940590e434a216ea5cc4d31e
SHA256

3628879ea59a4964b27d1e795c4b2af22dd1622727c9a1524b483bdf2576f350
SHA512

f24cf3b39e4fb5a5ecfde536ab9f4305ded62602dac27ab922a3d779ae6cc65595fc70e3fc7574696b6848144f7d434814d71d0f93c3221280b5a00ebc13cf11
SSDEEP

96:cwJIRiOFFIR8PbXG5u+bcvDT9IR1up4zmE+JaXIR8myoJ:c84kaDpqek/2

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

Processes:

wscript.exe

flow pid process

4 1724 wscript.exe
5 1724 wscript.exe
6 1724 wscript.exe
7 1724 wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\ORDER-234478F_List.pdf.js
1⤵
- Blocklisted process makes network request
PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...