0d9d29f9791135c9bff0a85bc33d59f0809a89451e922237c3dbd8b57c86bec0 | Triage

Analysis

max time kernel
131s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
26/11/2023, 18:37

Sharing

Report Analysis Logs

General

Target

Update.js
Size

5KB
MD5

e4d259564ea1bd2bf56e3d3c80efd060
SHA1

cb5106c20603da4e94369fdcb2d25b37f317d5f1
SHA256

0d9d29f9791135c9bff0a85bc33d59f0809a89451e922237c3dbd8b57c86bec0
SHA512

1d31a5491dd04a3a7d9abe52eed55d03bd758a05310f56fc9c9d264bf99ba35ad789ff0ad72c0f61c2547c8b2c31ba205cd09ba8610ceb3ce19eb44cdfa5cc8e
SSDEEP

96:KWvHqfzYdb65UG/6mA0t4jTTV7pF57Hqiiwve9b8nuCMq1CerVEXo9XkI7Ed:KWA5UG/w0t4jPd5HrHvAb8uZiCex+wXc

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

flow	pid	Process
4	1668	wscript.exe
12	1668	wscript.exe
14	1668	wscript.exe
17	1668	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Update.js
1⤵
- Blocklisted process makes network request
PID:1668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads