919720afc5ba1bec972576f71fcde38b9e7597425a34ba7ffb8ba38147485e72 | Triage

Analysis

max time kernel
137s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
02/07/2023, 04:18

Sharing

Report Analysis Logs

General

Target

acceptData.js
Size

318B
MD5

784eb09770f6731c4fb5c57207955cfb
SHA1

6f1a8e3bbd06b58c996d0b770371968316e13c0b
SHA256

df9bb083e3899397124dcecfeede435a76c799f451570ddf99ada79efb1fa374
SHA512

649ffddd8a489e204deecd3fd559883e895b05ecacbbc04962e6cc95fb23dfe0c67134a3f9d3635a8ef3ef660d1ff53c88458c655081c0105780115a9fe2dbf6

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 8 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{9EBDE9F7-B084-43BD-861D-24DEE046E022}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{ED3CD37C-9361-41EA-B5C4-063273E1ED1D}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{4135CDE8-CBB9-4D86-BBFA-F031D6965CF4}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{C111B579-FEC4-4B5D-935A-40B1C92A13E5}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{EE3A5F84-6A0C-4250-B8B3-9D0C4C8E6425}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{DE9F9F62-5EE1-486B-9C5E-5164FD0B7E80}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{4C4ABEA0-3E4A-47F1-82D5-2BC5C6A4FBDD}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{297A60BB-C343-4CBB-8EBA-C5FAE435DE61}.catalogItem	svchost.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\acceptData.js
1⤵
PID:4956

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
1⤵
- Drops file in System32 directory
PID:1304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads