aaad6ee087c6942dad2e084453cafe83cd6ec26f62dbe43b1254345828f7cbac

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23-08-2024 15:37

Target

c-users-bcrabtree-downloads-update-js.js
Size

5.2MB
MD5

9967ea6d3719ab8cc181766ba7098b3b
SHA1

f26c05f206a6d06761f46abd40ae1aa381861d73
SHA256

aaad6ee087c6942dad2e084453cafe83cd6ec26f62dbe43b1254345828f7cbac
SHA512

d64b3d3a45c2dee4fd712444903992757772187ead4a0f23d5856270c18c0c80eb7626404b1104a41cae42decd5be16c137b41608c335e994fe1a40ed6eb8f59
SSDEEP

49152:6sz6FvpOiHY7sz6FvpOiHYXsz6FvpOiHY7sz6FvpOiHYIsz6FvpOiHY7sz6FvpO8:60WQ0Ws0WQ0Wz0WQ0Ws0WQ0W5

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
3	2856	wscript.exe
4	2856	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\c-users-bcrabtree-downloads-update-js.js
1⤵
- Blocklisted process makes network request
PID:2856

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact