09bcbb3e563884099433b0acc3bda61b7c6ae2a23b74fd99276d496d78d1d1d5

Analysis

max time kernel
135s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 12:24

Target

KZ_573773_04252019.js
Size

29KB
MD5

946ba70fcb91888981e6fc5a81d9e7ae
SHA1

e27fc7f1e81f0b451e99c2d96974a4823205205b
SHA256

edab37a0304b9b8cb7c0140043b1c41de464928d5835545575e593b95f5f9295
SHA512

b2fa61f8417008d2e36ad456ff1a07a9dca88725c639c0724db913fae7eb2697e7b7c9927db0a8b6ade268f5317be37396c0e21f573363c1ceaaa774127e8c0d
SSDEEP

768:oN8JZ9V6GVltl5jYRwV/Y7Ct5NwLMbJdu682DllC9oVx6G/l5t5s25clXCPWtATt:o+JZ9V6GVltl5jYReb5

Score

8^/10

execution

Blocklisted process makes network request 5 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\KZ_573773_04252019.js
1⤵
- Blocklisted process makes network request
PID:4264

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact