fd68b0bfbc35ddb547d6ae7dd4eff32c50ce88369a088f17792553fb8fc08d97

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 17:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Всероссийский Банк Развития Регионов.js
Size

6KB
MD5

06b781ff0af39f720e78bdbcddf5d4c6
SHA1

d9e66c9f9b84c872136437bb8fe44f324ff68d83
SHA256

20baae1fd2b434ea42a47b781a79d9e5fe84864ef47fed430a8c63b93f4979c6
SHA512

ca30c06bd9ba94c6d8a17d0a7bc1a6fd1cf6441e4fc199d4b9ed01e744546a4d7abf3e145823fab8e1231d8082a98ce77ca1279c3c8f74f7204cae91f1a28076
SSDEEP

96:jgojUuME8ULdYKjYfHtR17sWW580/dFR0fs/VRmm72Sr0KZrbP4k:R58ULdYwQR1V3EdkUpSnSrbP5

Score

8^/10

execution

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

flow	pid	Process
2	2236	wscript.exe
6	2236	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Всероссийский Банк Развития Регионов.js"
1⤵
- Blocklisted process makes network request
PID:2236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1344 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:8
1⤵
PID:3668

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads