5838e18c0d46fb1c5eb16dfc3edfccbe611ad69b5cce76043e764a1d1b26da63

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
16-06-2024 14:00

Target

LLC_07977786626US_Apr_24_2019.js
Size

49KB
MD5

223018ee0cbc85c3fde562c227c012f0
SHA1

beda5f3867ccaf58fec3344fe666ea93b35cea4d
SHA256

a89d55ff31f6d08a85a5d289901fc98d4bfcf5a856ced841496b1bfb951744cd
SHA512

0ed70a2ad52b9bb4bf0ecf682a5a2d100d3356090ca0c69e9af446d2a685e7dd7bcdd46a97543fd6f24bdf707a75d5a017df933a0e328efeba01c84cd0a6de33
SSDEEP

1536:aoiHODRILDLGX4fQKml7SvJxBguvnv2wcfrGu62G4vX2NBSBZh58v:aoiHODRILDLGX4fQpl7mxBguvnv2wcfu

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
4	2208	wscript.exe
7	2208	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\LLC_07977786626US_Apr_24_2019.js
1⤵
- Blocklisted process makes network request
PID:2208

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact