1f18a298cc1cdd9527f5345e3ac6438cadffdbf62a1f2a4dc69a22a626980c41

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13-06-2024 09:24

Target

a4d5a34021c1e7d3e7ebc57672056d87_JaffaCakes118.js
Size

36KB
MD5

a4d5a34021c1e7d3e7ebc57672056d87
SHA1

68fafd8ddf9a473e7d3386c3706d0b0aa9c62557
SHA256

1f18a298cc1cdd9527f5345e3ac6438cadffdbf62a1f2a4dc69a22a626980c41
SHA512

58d8001a7b896364363ff5023a240ce64fdac794c4d93370e52d215d8715ea06bf888f68b6a9a0250e633dac5fbc033e585938d2c0a511a539b0671e62dabbe4
SSDEEP

768:Ea+nb2bB1qxByAMFcaK2biXth937FL7MzGAzLRwALCZt:EHnb2N1DF3+BSmALwt

Score

8^/10

execution

Blocklisted process makes network request 8 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\a4d5a34021c1e7d3e7ebc57672056d87_JaffaCakes118.js
1⤵
- Blocklisted process makes network request
PID:3640

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact