82a6ea1721bb31929e77725f9bb6e4dc38719ce8d61a5633285aed7cd5260b40

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
10-09-2024 14:32

Target

Update.js
Size

2.6MB
MD5

44b73d7c14986000a0865aefb01bf02b
SHA1

0f41ec94c405aa3e46b090a3ecda574cb01f17b3
SHA256

82a6ea1721bb31929e77725f9bb6e4dc38719ce8d61a5633285aed7cd5260b40
SHA512

710002980e208a5c061f543c1d36cc529ed8a1e3d6a2bfa39755a6c6fb4e883fd56ac6244715707619845098414e6d0007ee64965ff193aa93a1b57ea93247d4
SSDEEP

49152:OCz4F9dM2furCz4F9dM2fu9Cz4F9dM2furCz4F9dM2fui:OkGgkGmkGgkG9

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
3	1992	wscript.exe
4	1992	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Update.js
1⤵
- Blocklisted process makes network request
PID:1992

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact