8a18ecb24b93730bf5c27ea69e00f4f5cc75adaa34a78510d5580fc5a5b5bebc

Analysis

max time kernel
113s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 16:34

Target

Visualizar comprovante-iphone7Plus.js
Size

9KB
MD5

b423d01ec840ebe869bd99b85014b8ae
SHA1

72ac7865119ff84ade13a8c0e2f57376ab0c705f
SHA256

a97bb6e3e4313bbd990887949bfd8c2b93ec7d852898ec5e7c94f05a49fd0da3
SHA512

8dfb2423e89ca099c482e27b398e8bc1855e0c8e984e954d2497ce267b52ee86822f6038cef50f34fde0ac5f71d898de6ee5d4cc2395027f7c7d9539fba7b872
SSDEEP

192:ZOf1RKUk4bTAfBJm6Hk89Wy4Wfg4ac1+nV1kjQ7R364:ZsjK0oO6HkqWy4WDHonoQ7xh

Score

8^/10

execution

Blocklisted process makes network request 1 IoCs

Processes:

wscript.exe

flow pid process

1 1836 wscript.exe
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

flow	pid	process
1	1836	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Visualizar comprovante-iphone7Plus.js"
1⤵
- Blocklisted process makes network request
PID:1836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2268 --field-trial-handle=2244,i,11878111470816612087,2265290141962607370,262144 --variations-seed-version /prefetch:8
1⤵
PID:5116

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact