7aed1fe262964760b85442dbea38c34fb89f69706742846d0501a38e3ec312f6

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 15:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LLC_257440684314US_Apr_28_2019.js
Size

38KB
MD5

2c255638e9f931532dc429698698fa7b
SHA1

8fbdcbc759c6d373e591bf4d03639e88487b29ae
SHA256

c2c75ef2cf7461733ccfcf2695ca9c2f3609ba27620ca160362ff85cd7d61559
SHA512

0747f55d2494e9ae0811b435b3101ed41b66675e42cbfd1960f07e2dccb03626f815f298d0ccbb2c3b4aaff803f7ae511ac789b9f07caa669f716294d5245d66
SSDEEP

768:vkPYKAKorzXDGDSvSEDmP+wZX2e2W6yz86AnWKWpkVANk6JxN:vkPYKAKorzXDGDSv2+wZG6wNgNDv

Score

8^/10

execution

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
4	2236	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\LLC_257440684314US_Apr_28_2019.js
1⤵
- Blocklisted process makes network request
PID:2236

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads