fb9d4b61e56063a7211d34d47850c505e50cd15c43d8bf93d675d6ef31d0597d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25-05-2024 16:34

Target

W_16742374_04252019.js
Size

27KB
MD5

b4c8024c33c0dea394c99d0def9719af
SHA1

5e1974bf83e90eb46cfb33d6acad5c9b98fbfa03
SHA256

b7fd23feb71f19a87e0130334f8dcbc28479db18fbd6ba0a89e9a64dc525c919
SHA512

53201c58a9a9a2700b72bc67ccdbfa584809e57f8e37e50d35365debd798748ad355fffec85ccb3243eae62f8f16c37729357b73a3924b086c65130031d9a43d
SSDEEP

768:uI91kvsSVmIPf8oFG5uGzx0ccsaxa1XqhRtFwF++VDcikKSBTzesRKS1M9N3KT4k:uI91kvsScLoFYRW9FjVfB5Rf1O3ePYpI

Score

8^/10

execution

Blocklisted process makes network request 4 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\W_16742374_04252019.js
1⤵
- Blocklisted process makes network request
PID:1068

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact