72c9ae0599080805aa46a4cf5adb2685ad6d5e81f6fc8ae53b7a232d406f186b

Analysis

max time kernel
144s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
01/05/2024, 06:40

Target
01052024_0640_us.txt.js
Size 634KB
Sample240501-hfee7acd36
SHA256 72c9ae0599080805aa46a4cf5adb2685ad6d5e81f6fc8ae53b7a232d406f186b
MD5 be1960a5bede346d98723b0fc76d2f02
SHA1 c0e53f5d259ed10a802cc0a6c96728f3df32864a
SHA512 e22c79f8d568e57c3e6c6d1edfadaa2373a7bbecff1875a43b6a509465e79b98fd4551256248266dfb2c6a76eaf38b8cc0df0eabe27cff355d9f4bba8f9be780
SSDEEP 12288:Pimg0Vtx60ZGnZH19ndYeIrWr/qRigAyX/DvZvTbxzhbObcizI/mofdEMdNtQCBx:Pimg0VtxMnZH19dYeIrWr/qRigAyX/DN
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Legitimate hosting services abused for malware hosting/C2 1 TTPs 11 IoCs

Web Service

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\01052024_0640_us.txt.js
1⤵
PID:320

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact