5acd33e1e58647897cd7897305eec80d6c9228ec2fce8f972825b48ea16a8c74

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
26-10-2024 11:19

Target

c56D7_Receipt.vbs
Size

130KB
MD5

878ba89eaad87f86c7ff4e5fee1e1823
SHA1

8f9496d5da92c9a0f64ffe5aa0ee0da259a9da1b
SHA256

30c4d81a0075e27984f768fa73c43240f5b14724a84a5057c15c99114b4aac15
SHA512

2ed93d10566fcd7bc312a321a4551611c08dc1de817cf89c5a46be1d8243b77a075896658dd92d5de9d66d7a5bed92b51d25e0729f06369ba673a12b1a37bc7b
SSDEEP

3072:ZxQCCYVaCCq+c0C49NixM8B20HcO4uuxQCCYVaCCq+c0C49NixM8B20HcO4uA:Z2CCYsfq+cp49oa8B208Mu2CCYsfq+cm

Score

8^/10

Blocklisted process makes network request 2 IoCs

Processes:

WScript.exe

flow pid process

2 1900 WScript.exe
4 1900 WScript.exe

flow	pid	process
2	1900	WScript.exe
4	1900	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\c56D7_Receipt.vbs"
1⤵
- Blocklisted process makes network request
PID:1900