89537e9aa35273022114d54b14e02f1a8c7bcf80c172f87fcf981e9bbc00c0e9

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16-05-2024 15:41

Target

89537e9aa35273022114d54b14e02f1a8c7bcf80c172f87fcf981e9bbc00c0e9.js
Size

26KB
MD5

68683b33d78997e81c059e829b695ae9
SHA1

53ca2d9a583993d81f6e991547759cd0b63fede0
SHA256

89537e9aa35273022114d54b14e02f1a8c7bcf80c172f87fcf981e9bbc00c0e9
SHA512

976ce3003000d87f0f8112d6fa4fc0a17f378a952f0a8d3eb81ab3c8a1c4b90f77a9e4fa51d48c772d132937568ce9004b1460781ae2e4c3a54a5223f86a10da
SSDEEP

768:2HdJjSibJ43M3fSjDHTjBV+GOE2wJUAqghiI9yFFBPtKA2K/MOgmT1TZuPrguIbu:ojLJ4R73ZF/kq03Cvp/

Score

8^/10

execution

Blocklisted process makes network request 4 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\89537e9aa35273022114d54b14e02f1a8c7bcf80c172f87fcf981e9bbc00c0e9.js
1⤵
- Blocklisted process makes network request
PID:2952

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact