639a52ac0f48d8f50087a000045ca96697b82bac64354c24e943d05adf382f54

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2024 18:28

Target

#YNOO2.js
Size

7KB
MD5

aa7a0447437a65fe55dad70eb23ee51c
SHA1

13a4ff9fbba5bf86c2943651bb253f28c09c0734
SHA256

959484bfe98d39321a877e976a7cde13c9e2d0667a155dda17aeade58b68391c
SHA512

e507b3065fb94d6610d72d6b723cabde19634eee11684b8864cc737fd530473be4989e9cb039a89b774952a5f881a6e6cbea834371817d31bb285b2ec2e117c4
SSDEEP

192:il3hrVMAMDXHULo/TZq+WXfpHBM3tHMqeW2uGpqj:ilx/oXS7fMuWLGo

Score

8^/10

execution

Blocklisted process makes network request 1 IoCs

flow	pid	Process
3	1464	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\#YNOO2.js
1⤵
- Blocklisted process makes network request
PID:1464

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact