fcb0592ede2a7037ebc9b2df1b0beb3f07de1636e6a05e5a33335a1a76bf3900

Analysis

max time kernel
133s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 03:12

Target

29853924731_May_01_2019.js
Size

39KB
MD5

894aa32cbc169bc55f76dbc745a8a409
SHA1

fa68cd456d468c0b5f501148107f0dcf726da043
SHA256

b0840f0a422e5b418f84a7e2a15d30bdec48404257a8b7bd95a36ee7d6806feb
SHA512

8e207d21917f818985d5467f029f87624fe2168d5b42cf64cbb2b1a497b957061014be720a5c00a57b918f1161f79784578f121412639d348ff54d3a8e0e3005
SSDEEP

768:tvvuVEOojy4VaOvblKaOMvRQnRUm0eRbE4YTtWsVuNfeqro6OAFhUaEcd9pruwIv:tvIEOoj9VDvxKaOMqnR+nKGb7+liO3te

Score

8^/10

execution

Blocklisted process makes network request 6 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\29853924731_May_01_2019.js
1⤵
- Blocklisted process makes network request
PID:4720

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact