Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25-09-2024 16:00
Static task
static1
Behavioral task
behavioral1
Sample
E_416560_04242019.js
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
E_416560_04242019.js
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
E_416560_04242019.js
-
Size
30KB
-
MD5
d8dd72216bd060322ac46c7257740ffb
-
SHA1
7fda43b576dbdce7861163ee564b25cf6eb5ddd6
-
SHA256
fefeae81b80a964d3c5ea9071faa2c207766e7b929a15049a4aa2087e56684da
-
SHA512
33ec8c9a52e27e626e90ca88e285b1c9f007a9b2548ae55e104470f751e60653c7e4bcc6c3b3a6f12ad1d88f9e4356bc219b32ac9e6c23636b15aaed7b699813
-
SSDEEP
768:yV+kwj15VdeIkjjSLT5uJT5BkMkqzB35xIkPVeJMXFpB6X88QjfsCE4F8kuF8vf3:yV+kAVdeIkjjST5uJEMkqzd5xvIChSF2
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 12 IoCs
flow pid Process 5 1712 wscript.exe 6 1712 wscript.exe 7 1712 wscript.exe 8 1712 wscript.exe 9 1712 wscript.exe 12 1712 wscript.exe 13 1712 wscript.exe 15 1712 wscript.exe 17 1712 wscript.exe 18 1712 wscript.exe 19 1712 wscript.exe 20 1712 wscript.exe -
Command and Scripting Interpreter: JavaScript 1 TTPs