7cd601d9c80f2ed5953f02aded0bee55ddffd325666467dbf7694c5c78eb2e13

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
12/09/2024, 02:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Scan_6635939620DE_April_24_2019.js
Size

46KB
MD5

c29fc956eca8f059f0a619287f86098a
SHA1

30d1daacf3c0f8800d75ce77f650371adf254d69
SHA256

a9066aec7f28a0064831b414f765fc536b4643884a73dab06523ffd2d9cb8f4f
SHA512

7a148e797a60ebd45c34e7419cdd99432144c8af114dac35876f74091db535626889a98f65a827d4cf0afb6ea8c5a8645106303129f65dfa8efa21420e805ec5
SSDEEP

768:ydE36Hfoaz6Cbm8le+b2YUT+klrrF7v1CPbCbxPajpECWw1Ctzo0v+EjHwtjYZTK:l3uQaz6Cbm8le+b2XT+urrVv1sbCbAjH

Score

8^/10

execution

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

flow	pid	Process
5	1724	wscript.exe
6	1724	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Scan_6635939620DE_April_24_2019.js
1⤵
- Blocklisted process makes network request
PID:1724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads