9e65701d93bbfcd343f35ba56160513a73cb95f748df4ad787c2344d8ea7ed9a

Analysis

max time kernel
92s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 23:34

Target
Информация о заказе Група компаний Строй-Индустрия.jse
Size 5KB
Sample240602-3kgrbsbc3s
SHA256 80c89861905f362c3474092e67944291326101429e0a3bd425ef24a99d33e59f
MD5 385dfe7823ba1b3bb5878cab1f1080b6
SHA1 0d3b1dcd743a1093b3acb63b338658f120dceab7
SHA512 3ea80894aa8141ae4bc7dc2b66ec374a060b12e636a4fa8c8e60ddde0015292cf341933a2fbd42c207ffc9da61c6373e0b5e36d89846fe5ce8d37ed8f5a4318e
SSDEEP 96:iSvUNkPnBJvmXw4V7ZPhjcYaWwCz+FB4QuiAZ/MDmiJ/7k0Yx:iSMNgnKg+haYFwCiFtup/MDmiJ/7nYx
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

execution

Blocklisted process makes network request 4 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Информация о заказе Група компаний Строй-Индустрия.jse"
1⤵
- Blocklisted process makes network request
PID:3224

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact