8d9653ecb5b1de15bd5843d8c287426e0945e9a7bcea698467cb0541a1f89de4

Analysis

max time kernel
138s
max time network
148s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02-12-2024 17:35

Target

MTCN_Details_88700289863691724720546027836.js
Size

701KB
MD5

586a7b77e2c9fbca0aa4159da9bee88e
SHA1

835f6ebd670fb20bab2c53ee433d22c3fba4218d
SHA256

8d9653ecb5b1de15bd5843d8c287426e0945e9a7bcea698467cb0541a1f89de4
SHA512

1830152d1fca1e608ba53a50d21e542dd16d6eed24be63fff2edbcd0d2a9dfbb48bc148850e42734c7b3efba60c44599b614d8bb82c50042b6e39e3cee2c9a62
SSDEEP

3072:caugBJE5XJhXBRzhmcKU6qvoTBlhkJwogCXfdEYG1zU1idXlQXuS5WYPSUanKQO8:zBMloXlQXuS5oOyG+1Z3

Score

8^/10

execution

Blocklisted process makes network request 5 IoCs

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\MTCN_Details_88700289863691724720546027836.js
1⤵
- Blocklisted process makes network request
PID:2376

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact