8a778046b85821226d3359e564093054a7fdfedf8d7f7b488d921017f581debd

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 17:16

Target
ПАО «Группа Компаний ПИК» подробности заказа.js
Size 6KB
Sample240530-vtdr2aga28
SHA256 792e13b4f8afc9dd985c9e1f33d03f8c811d8c15ff60bcf11c42d8fb337c1eab
MD5 9308c2bda6abae3262ffada964d45cb1
SHA1 28e7d945ec4e07103e638c82ab34c268c0c321a3
SHA512 e245998ec708dba9eff8c22cffef31915488c1a745a94b675e72da335dc946d888795ebc0ed29a691e15957fddc9d5f6ea134fd244ffd5ec100a33488018a85f
SSDEEP 96:9pgjZcqbgKdG1MNmNcLK4L4qa53f/lNIJIRosOB5akKp2QsnC7ibh:9Gjxbgj1MAam4L4qap/IJ/sOq8rC7iV
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

execution

Blocklisted process makes network request 5 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\ПАО «Группа Компаний ПИК» подробности заказа.js"
1⤵
- Blocklisted process makes network request
PID:3120

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact