a6f1f68827303e655488c8d54b3be3ce8b1097f3ff374a2e4bc82ff96812781c

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27/03/2025, 10:21

Target

Chrome 134.0.6998.06076.js
Size

272KB
MD5

42c7cb5bf47f4cb1bf513b50681bdfac
SHA1

ccfbcb44daab190c51fd80c3064f435d44a46860
SHA256

a6f1f68827303e655488c8d54b3be3ce8b1097f3ff374a2e4bc82ff96812781c
SHA512

c2bff53ea8c1b09c2d034ca398d5f8ac409eb25c5aae96a84deba66bf5b151c665d9f9e76ae78dbff3c00a28ff9cf9dd89fb97ee8f8c411bd8c1a6e01e0c5db3
SSDEEP

6144:hap3Ih6n/cSCP4wlyT/jd4OflUa2QGFmmaxJFa8FBIPI1fdAT2stiQw:hFlS4OfhsFmdv31fdA/tTw

Score

8^/10

execution

Blocklisted process makes network request 2 IoCs

flow	pid	Process
3	2124	wscript.exe
4	2124	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Chrome 134.0.6998.06076.js"
1⤵
- Blocklisted process makes network request
PID:2124

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact