569413d82fbb3fdcec77ee18ab84665ee5f8cdb765a8d06c248e83895e1acf6c

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07-09-2024 08:44

Target

42761913641-May_01_2019.js
Size

39KB
MD5

894aa32cbc169bc55f76dbc745a8a409
SHA1

fa68cd456d468c0b5f501148107f0dcf726da043
SHA256

b0840f0a422e5b418f84a7e2a15d30bdec48404257a8b7bd95a36ee7d6806feb
SHA512

8e207d21917f818985d5467f029f87624fe2168d5b42cf64cbb2b1a497b957061014be720a5c00a57b918f1161f79784578f121412639d348ff54d3a8e0e3005
SSDEEP

768:tvvuVEOojy4VaOvblKaOMvRQnRUm0eRbE4YTtWsVuNfeqro6OAFhUaEcd9pruwIv:tvIEOoj9VDvxKaOMqnR+nKGb7+liO3te

Score

8^/10

execution

Blocklisted process makes network request 1 IoCs

flow	pid	Process
4	2812	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\42761913641-May_01_2019.js
1⤵
- Blocklisted process makes network request
PID:2812

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact