6a1e4ead3cab5bc719dc78ab7d2bf68fdccec0355d81a1566519cd74b12e9f1c

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 10:29

Target
201905_ACC_2526195573_142038.js
Size 35KB
Sample240603-mja96abc71
SHA256 9d322774893c0f550caaebfda131701c8ad4c81c95979003ee6620e564721eea
MD5 c14ff347ba3a5d952c9e58866f05a92c
SHA1 866acc3b5c8b9f44d185a0514e3cbd34b913ece2
SHA512 f7383c3bdd788c7a09a454cd86843f7ae1e99c25f807cf1543f61412e7453d9bc0ca7aed40579245d68ad09c8a0e35879ce2faae0a8cf9cc212438f5a26099da
SSDEEP 768:sma3MrzZjjg/pNvkzhBdjvF9SkDe5mTGZMRQLJEM/pn:5+Mr1jjgzszndjvF9SkDZCZpl
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

execution

Blocklisted process makes network request 6 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\201905_ACC_2526195573_142038.js
1⤵
- Blocklisted process makes network request
PID:3004

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact