Overview
overview
6Static
static
1github.com...NS.ps1
windows10-2004-x64
6github.com...NS.ps1
windows11-21h2-x64
6github.com...ST-.js
windows10-2004-x64
3github.com...ST-.js
windows11-21h2-x64
3github.com...T-.ps1
windows10-2004-x64
6github.com...T-.ps1
windows11-21h2-x64
6github.com...es.vbs
windows10-2004-x64
1github.com...es.vbs
windows11-21h2-x64
1github.com...ds.ps1
windows10-2004-x64
6github.com...ds.ps1
windows11-21h2-x64
6github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...37.vbs
windows10-2004-x64
1github.com...37.vbs
windows11-21h2-x64
1github.com...ICA.js
windows10-2004-x64
3github.com...ICA.js
windows11-21h2-x64
3github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...160.js
windows10-2004-x64
3github.com...160.js
windows11-21h2-x64
3github.com...370.js
windows10-2004-x64
3github.com...370.js
windows11-21h2-x64
3github.com...390.js
windows10-2004-x64
3github.com...390.js
windows11-21h2-x64
3github.com...150.js
windows10-2004-x64
3github.com...150.js
windows11-21h2-x64
3github.com...320.js
windows10-2004-x64
3github.com...320.js
windows11-21h2-x64
3github.com...110.js
windows10-2004-x64
3github.com...110.js
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
109s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win11-20260513-en
General
- Target github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
- Size 6KB
- Sample260602-wvbvhadt6l
- SHA256 02d46fc0a7680ce7b1f3969ffa8ec4c4c77bdef3bb32ec38c59a783f73e6a07b
- MD5 9464b974658b28b9e04e1c5e36c503d6
- SHA1 eaf3ed2d2d6f663bbaa5518f10d8ab6ac0fd5110
- SHA512 dd7fa401b60e132a96eec662468b6d983a0c7be2facb9b6601af2646555c93bf496ee08db14fe85e837913fdf737b31b2bcad866bd05d26a1d3daf8a603c0633
- SSDEEP 48:nzpLrEQoMIQoEDARQoZuT/RQoSuS/RQoHuTqQoYu1IaUQotuwXTFQomLA3yLFQo6:nKdteVbu0uxMa8FILlFkLmFM
- TLSH T13CD1F2135A3B6396A55D87AAF2E5D31B1263EC0FE007AD38B66C07151F2660C63E18F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\github.com\corazawaf\[email protected]\tests\REQUEST-941-APPLICATION-ATTACK-XSS\941370.js1⤵PID:4744