e735705a1139c375d27ed9947383bdcebc53edcdba6df812348dbbd8b993d9a8

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 16:03

Target

LLC_978773177702US_Apr_30_2019.js
Size

46KB
MD5

16edfcc38efdd206d13594c13924fca4
SHA1

d4a831a5e84d446c701ccd2a42ba0a56c2bc8aea
SHA256

525dbb4610ce02b0154a5d4012a7f7b3f6e51212adfd94db6981f5d018fa6daa
SHA512

a7bb2a4f8c9ee6ebe316be4bbc29d021324498146a067a637c2cfcb4b9c52a1956b20cc0c151b2919b8b7bddd30a95531d00aa5d4c16d5f27f691e35812720e5
SSDEEP

768:y9eNvplCgard9SGmrnsTSORNtyxmLr91RCcemIH+Nu8fOJ/+5tWi2Y4GIHvJ2iil:y9eNRlCrrhmrsTSORfg4HRMmIHpJLi2W

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
6	2036	wscript.exe
11	2036	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\LLC_978773177702US_Apr_30_2019.js
1⤵
- Blocklisted process makes network request
PID:2036

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact