ffc08becdac4394c50aef80c20cd3b352006f8865f380075e11865a93331323c

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
26/07/2024, 02:34

Target

26072024_0234_2POSIBLE_SANCI%C3%93N_E_INHABILIDAD_DEL_CARGO.js
Size

6KB
MD5

4f6f3ca46b30b153100fc188a4234174
SHA1

f72f569ff01a0805ed65572243a7976e8919a33a
SHA256

ffc08becdac4394c50aef80c20cd3b352006f8865f380075e11865a93331323c
SHA512

c6f11a87debd57d7e5eb210411159261b23a9753092db587cb39a83665afe07e1555e4de91eb76da6859e5f93bc8722abd6db314f5293310abb88bc471e3bff1
SSDEEP

96:XuH7H9AnzD7m9Y6cTYumwFZgw93Zc9X9l85hRH23DgEiV2EwQaVwxwc5:8KzTTnYgDKnEV

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
4	1984	wscript.exe
7	1984	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\26072024_0234_2POSIBLE_SANCI%C3%93N_E_INHABILIDAD_DEL_CARGO.js
1⤵
- Blocklisted process makes network request
PID:1984

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact