5eddfcfbde12dfd59c1ddd866546c9604f392d350ebc83a0ef58f5026e4fea4d

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
20-11-2024 18:18

Target

bbb50d99d2286fd78099998d4b3f17e441927cfa1e3951893e7acecf77fee1d5.js
Size

1KB
MD5

3322656d0ed56adf901eb96133be3dd6
SHA1

9d52c69d88ec67311de43534075c737b9fee061a
SHA256

bbb50d99d2286fd78099998d4b3f17e441927cfa1e3951893e7acecf77fee1d5
SHA512

b94a6caa79a5899851d811d54ae6b2625df66a86683b06576ac72108b32099e61cc098ac91361b1b53bcec21517ce0aec13af37f37b31bffd43b7379b8eb9654

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

Processes:

wscript.exe

flow pid process

5 1736 wscript.exe
7 1736 wscript.exe
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

flow	pid	process
5	1736	wscript.exe
7	1736	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\bbb50d99d2286fd78099998d4b3f17e441927cfa1e3951893e7acecf77fee1d5.js
1⤵
- Blocklisted process makes network request
PID:1736

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact