5eddfcfbde12dfd59c1ddd866546c9604f392d350ebc83a0ef58f5026e4fea4d

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
20-11-2024 18:18

Target

76a5d5651a6bb05f67e88fb646e969963c8f3baeda763a86649d4cd2f2ff967b.js
Size

1KB
MD5

2a16e3be007559b0c42104025a3a2941
SHA1

22ecb792e6ca50fdbb9da0420228b9d6a6c1e3d5
SHA256

76a5d5651a6bb05f67e88fb646e969963c8f3baeda763a86649d4cd2f2ff967b
SHA512

c2581a1a1b4a05941e593dc62cf6d7ad5a17fbc335df2d0916b0458113f3c2cd98a776dfd11ba76082d72bd9169ebc97086d8331b188b241407a060bfaa5cba3

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

Processes:

wscript.exe

flow pid process

5 2204 wscript.exe
7 2204 wscript.exe
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

flow	pid	process
5	2204	wscript.exe
7	2204	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\76a5d5651a6bb05f67e88fb646e969963c8f3baeda763a86649d4cd2f2ff967b.js
1⤵
- Blocklisted process makes network request
PID:2204

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact