0f126ff4c41b9639a1a2a44acf745d223a16f6e79f493335ea7931e330401851

Analysis

max time kernel
137s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16/05/2024, 02:18

Target

ПАО «Группа Компаний ПИК» подробности заказа.js
Size

7KB
MD5

2fd18c1b35fd014748bef62732e855af
SHA1

996ffef12475811cb2e53443eb32fe2a168e28bf
SHA256

6bf906769eaf283a0581294ae4cac09b52842fcc2762e47154021f08239084d1
SHA512

61fab549c493d51d3d4c0b98bdda4a1787e5a5bb4f85dc091cd08e6c72deed8b0ceaa78c46742a053118d19d920042804344569ba05225d85527412d06d572b4
SSDEEP

192:1eqsEgAt72z91PUJrqmrP7iRDVoxvD59f:1eqsEzt091krv+DVoxv7f

Score

8^/10

execution

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	4156	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\ПАО «Группа Компаний ПИК» подробности заказа.js"
1⤵
- Blocklisted process makes network request
PID:4156

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact