Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    24-11-2023 12:13

General

  • Target

    Agenzia_Entrate (36).js

  • Size

    4KB

  • MD5

    b7ca22f18c6a266ce3735d61ff873688

  • SHA1

    875ae41d2cf0712b2286332393ba5dce2ab37f91

  • SHA256

    ae789c227c3e197e79fbacef2c50898288cb5d5d0c21349c58b835adc97ea2fe

  • SHA512

    64a4bd6c2e8f1d6a163e8eb06c0063864f19f4f3200a0548488e07dbf53cd648252f0ea62127ad6583a03e29d4c6e2cb7799bf6df5dfc1cd3c802756b36f126c

  • SSDEEP

    96:mAqHSCKS/elI9TWDhJxcSCGVXy3h8mAm53y3SwUP3PY96lBqk8jfXdqk5j/5HaJ2:mf0IQjxC3hWwISTP38wK7JavgbZ2kKlq

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 2 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe "C:\Users\Admin\AppData\Local\Temp\Agenzia_Entrate (36).js"
    1⤵
    • Blocklisted process makes network request
    PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads