089f1c779eacb215387da1885406f7b67f2fc0043b9c703f1dccddd3a787f4c8

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
02-10-2024 01:00

Target

Update.js
Size

2.6MB
MD5

36ee5581812c837d817cfc14100ec6cf
SHA1

4cbc8e964776041f36f64a617aa72b445b298e28
SHA256

089f1c779eacb215387da1885406f7b67f2fc0043b9c703f1dccddd3a787f4c8
SHA512

95edeeffd980262016ed47491009326629b8a11c1108dbf9a50ff9dd91d58f1c2d5a358452537265943db98b121c35680d556b653cb01730d8d7545a7f513a89
SSDEEP

49152:OCz4F9dM2furCz4F9dM2fuQCz4F9dM2furCz4F9dM2fui:OkGgkGDkGgkG9

Score

8^/10

execution

Blocklisted process makes network request 4 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Update.js
1⤵
- Blocklisted process makes network request
PID:2596

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact