cdd9798b8cfc59617f38456b48dd5a6d0a2bb793dfd59f1684175a1a8ba48ab6

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
10/10/2024, 17:32

Target

Update (1).js
Size

3.9MB
MD5

49273816c994664478dec45a8e20a531
SHA1

7b3d5e27f0ad29c18e578bddc1d25ac29901a38b
SHA256

cdd9798b8cfc59617f38456b48dd5a6d0a2bb793dfd59f1684175a1a8ba48ab6
SHA512

0ae0fa0aaa5694aeef9a49de081c99aa0eed550d241b9ea8a5e1d1e412b9fa98473efd11b5c4157c41d6d8bc82be7e065e99f55532465b04e78252e2afb010cc
SSDEEP

49152:OCz4F9dM2furCz4F9dM2fuVCz4F9dM2furCz4F9dM2fumCz4F9dM2furCz4F9dME:OkGgkGMkGgkGvkGgkG9

Score

8^/10

execution

Blocklisted process makes network request 4 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Update (1).js"
1⤵
- Blocklisted process makes network request
PID:2168

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact