Analysis Overview
SHA256
945e1085ca45fb634c0f0b5504743b824b289bac2bc04f8068e0dc71ba082109
Threat Level: Likely benign
The file 12062024_1632_12062024_Purchase Order Enquiry #PO-240902.zip was found to be: Likely benign.
Malicious Activity Summary
Command and Scripting Interpreter: JavaScript
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-06-12 16:32
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-12 16:32
Reported
2024-06-12 16:34
Platform
win7-20240508-en
Max time kernel
121s
Max time network
122s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Purchase Order Enquiry #PO-240902.js"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | paste.ee | udp |
Files
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-12 16:32
Reported
2024-06-12 16:34
Platform
win10v2004-20240508-en
Max time kernel
147s
Max time network
150s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Purchase Order Enquiry #PO-240902.js"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | paste.ee | udp |