f43237bf898b7cb606808cf42466be3d306394ed8d1e0a0f0342bb6d3a4b6da1

Analysis

max time kernel
14s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
31-08-2024 14:57

Target

ba583aa6128b64d9c417f5463d6716aa6d112c77cc69e9a643dafa8fb7738b99.js
Size

2.6MB
MD5

e9af416c1c0773cb7a689c8a58ee5150
SHA1

482c487c48694e335832024d93b575ecfb7c0d2b
SHA256

ba583aa6128b64d9c417f5463d6716aa6d112c77cc69e9a643dafa8fb7738b99
SHA512

2653d1b113562ec37d0c105006501aae0cc906bba123e376a85a2894885d66d5edc9669a6d930402875713d02df0fa9d05920078b5711fe162cf43c70ca3a2b6
SSDEEP

49152:6sz6FvpOiHY7sz6FvpOiHYUsz6FvpOiHY7sz6FvpOiHY0:60WQ0Wp0WQ0W5

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
3	2176	wscript.exe
4	2176	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\ba583aa6128b64d9c417f5463d6716aa6d112c77cc69e9a643dafa8fb7738b99.js
1⤵
- Blocklisted process makes network request
PID:2176

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact