8574d2327ab0c3bfbc080be16c011864e3396e6e57b6ef13bc8378a26e7323f8

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
15/06/2024, 09:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Install-Setup.js
Size

4KB
MD5

9720a8179e767f40d0d47ecb122abe6e
SHA1

35e0ff7d70b8d96de90ed4bdf8a0f3d11dba618f
SHA256

262c194576f979029a08847e1353698da9060d1fa65bb8a58abbb156e24363df
SHA512

c148ad3d62f6dfd2b1dc3e45877994db48cfecf3266620db8b9f60052ede18603e9482534ecb04c72d1daf150d15cceaab47d5b5f470763e4b88384513536ea4
SSDEEP

96:K1sCzCX0A9PkpMT1LxzEK2w8RcTFmWjYG:5VXgmzz4YFmWjYG

Score

8^/10

execution

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
1	1708	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Install-Setup.js
1⤵
- Blocklisted process makes network request
PID:1708

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...