76f6ad7ac251a4529341f28fc1aa4dc0ee2836caccdcf146816dab5040697884

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
09-08-2024 17:10

Target

Update.js
Size

3.9MB
MD5

a258d4bc0d68fd1bd8eca1a04f204caa
SHA1

a287d8e69d87b0134405a64e4293d08a20fa1973
SHA256

76f6ad7ac251a4529341f28fc1aa4dc0ee2836caccdcf146816dab5040697884
SHA512

6fee6c9ef2cd8151fc8cd79e049041bc9ebe031ee72cd05f150c54fba21f9b93f7692746f6bd18868314c065ecc77d694034ab351ccd171017ab0209f15a473a
SSDEEP

49152:6sz6FvpOiHY7sz6FvpOiHYXsz6FvpOiHY7sz6FvpOiHYEsz6FvpOiHY7sz6FvpOQ:60WQ0Ws0WQ0Wd0WQ0W5

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
3	2068	wscript.exe
4	2068	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Update.js
1⤵
- Blocklisted process makes network request
PID:2068

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact