aa3dd9198b73621d0862bf2db7eda5961e1e34249ad1942d77b847f99a399225

Analysis

max time kernel
135s
max time network
145s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 13:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

download_videoaula2.js
Size

34KB
MD5

d356888af5b69c4cce633c2973f8771b
SHA1

0f1abaf888e67c38f7c72c487f904d1a95fdf764
SHA256

9bb371231205d1dca2a7fcb9cb16aed0cb0c4be61618979ec49ee8b53d3988b9
SHA512

d7fce3e5385f6f20bf7f536cc6a779d15f2dd957a4adf6061bf21af0e9f75a957a142de338ff6f1c51c4e4abc94b89a8da7852367f41b04d0d748ce7eae17751
SSDEEP

384:Rsk0I67auWhmL1Zdnd18AapZotkEpEStkEpVOtkEpmHtkEpGbMyDGfaYrQ4ho34C:CDi4fTGgt5tQtGtKbMyl

Score

8^/10

execution

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

flow	pid	Process
5	1836	wscript.exe
8	1836	wscript.exe
10	1836	wscript.exe
11	1836	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\download_videoaula2.js
1⤵
- Blocklisted process makes network request
PID:1836

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...