3e6acb48a4489f7d685223a299ea46c97839cfa3567453a22a44677e2ca13880

Analysis

max time kernel
92s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 15:02

Target
KK_61387375_04242019.js
Size 30KB
Sample240612-sefxqstanq
SHA256 fefeae81b80a964d3c5ea9071faa2c207766e7b929a15049a4aa2087e56684da
MD5 d8dd72216bd060322ac46c7257740ffb
SHA1 7fda43b576dbdce7861163ee564b25cf6eb5ddd6
SHA512 33ec8c9a52e27e626e90ca88e285b1c9f007a9b2548ae55e104470f751e60653c7e4bcc6c3b3a6f12ad1d88f9e4356bc219b32ac9e6c23636b15aaed7b699813
SSDEEP 768:yV+kwj15VdeIkjjSLT5uJT5BkMkqzB35xIkPVeJMXFpB6X88QjfsCE4F8kuF8vf3:yV+kAVdeIkjjST5uJEMkqzd5xvIChSF2
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

execution

Blocklisted process makes network request 10 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\KK_61387375_04242019.js
1⤵
- Blocklisted process makes network request
PID:1084

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact