3e5c87f3e6dd0b970dad71697c20912f17ea7dd34a123f2051e632f2193a3eed

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27-05-2024 23:17

Target

Dokument_472355041175DE_April_25_2019.js
Size

40KB
MD5

37f92c5312f3183a6e5f3203c526dacc
SHA1

92fe57b0bda6a6bee381aecec1d18837287098d3
SHA256

6f785ecc79f5ca6ac6410eed4fa59bbe13ca49cc2e1f3e2bee9412811a6e3036
SHA512

83b92329a368e0b241664571616b3f55b8170e928babfbb626a7baa95993b598674485500c1847cd2b419f8301dc3c732bc2e16fc678b662e2de231da837485b
SSDEEP

768:n+0MM7kWOUwnFyx+ztpV5P1zRpmvRgGtEDdC7PpGqANV71O5x6:+0fkWrwnFyx+xpVxpWRy47P3aUx6

Score

8^/10

execution

Blocklisted process makes network request 1 IoCs

flow	pid	Process
4	5096	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Dokument_472355041175DE_April_25_2019.js
1⤵
- Blocklisted process makes network request
PID:5096

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact