855a114cd6a50ca908297f9399fa7d7c394bba0fb01b0d11009001d5ba00c1ac

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 10:29

Target
I-3351900-04262019.js
Size 29KB
Sample240603-mjk5csce93
SHA256 f49b59f066266e3221f9a73108d13447ae21166858233d7c50c54ad6dd9d1fe0
MD5 0ab9ecf40a20d9138df175217e2b59e5
SHA1 b194c983c78e23f417e145210471179190b5f0cd
SHA512 d96c91a4a7c9dd7d440b474e92a516d8d46a8ed61b8baf21fbf248b00c3dfca2432cebc898ba080a6b55d07cb676f8902bc4dae5a61233bee26af2133caa93ce
SSDEEP 768:nu6eyZCR3pL62RezD/C6nvaSJ77NVszk/huoOvSSxMlOzux2B/mlmgpu0ofo5HER:nHeyIRmDL8l45oKG
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

execution

Blocklisted process makes network request 7 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\I-3351900-04262019.js
1⤵
- Blocklisted process makes network request
PID:2848

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact