68b14664d55df9626737a6c1b5ff7f0427dc7e03b5cf3f63820eeb2762d5053c

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2024 09:23

Target

33213395087DE_April_30_2019.js
Size

46KB
MD5

16edfcc38efdd206d13594c13924fca4
SHA1

d4a831a5e84d446c701ccd2a42ba0a56c2bc8aea
SHA256

525dbb4610ce02b0154a5d4012a7f7b3f6e51212adfd94db6981f5d018fa6daa
SHA512

a7bb2a4f8c9ee6ebe316be4bbc29d021324498146a067a637c2cfcb4b9c52a1956b20cc0c151b2919b8b7bddd30a95531d00aa5d4c16d5f27f691e35812720e5
SSDEEP

768:y9eNvplCgard9SGmrnsTSORNtyxmLr91RCcemIH+Nu8fOJ/+5tWi2Y4GIHvJ2iil:y9eNRlCrrhmrsTSORfg4HRMmIHpJLi2W

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
3	376	wscript.exe
8	376	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\33213395087DE_April_30_2019.js
1⤵
- Blocklisted process makes network request
PID:376

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact