Overview
overview
6Static
static
1github.com...NS.ps1
windows10-2004-x64
6github.com...NS.ps1
windows11-21h2-x64
6github.com...ST-.js
windows10-2004-x64
3github.com...ST-.js
windows11-21h2-x64
3github.com...T-.ps1
windows10-2004-x64
6github.com...T-.ps1
windows11-21h2-x64
6github.com...es.vbs
windows10-2004-x64
1github.com...es.vbs
windows11-21h2-x64
1github.com...ds.ps1
windows10-2004-x64
6github.com...ds.ps1
windows11-21h2-x64
6github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...37.vbs
windows10-2004-x64
1github.com...37.vbs
windows11-21h2-x64
1github.com...ICA.js
windows10-2004-x64
3github.com...ICA.js
windows11-21h2-x64
3github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...160.js
windows10-2004-x64
3github.com...160.js
windows11-21h2-x64
3github.com...370.js
windows10-2004-x64
3github.com...370.js
windows11-21h2-x64
3github.com...390.js
windows10-2004-x64
3github.com...390.js
windows11-21h2-x64
3github.com...150.js
windows10-2004-x64
3github.com...150.js
windows11-21h2-x64
3github.com...320.js
windows10-2004-x64
3github.com...320.js
windows11-21h2-x64
3github.com...110.js
windows10-2004-x64
3github.com...110.js
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
98s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win11-20260513-en
General
- Target github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
- Size 7KB
- Sample260602-wvbvhadt6l
- SHA256 9982c22e0785746bd9438c95a6a1a6a2060ee121002864b3adb19c17fb329f48
- MD5 2dd04b1148d2904de04821d53b94b5ff
- SHA1 dccf2b8f2644a77bf4f399ab5b1359ba7671c0ca
- SHA512 b498a69afe82467dd3ed3c7dcc5ed1ed0bc94c2aaa0768d624ca12dcb72e5ce21c5abb32d16e8d8809969bb748f19bc33b1264cae4d973724e6a417011ba6c51
- SSDEEP 48:cMuUFYNXz5DKYNXS5D7YNXM5DIYNXd5DplS5D+gXn5Dfn4g5D83475DtygS9vHBL:cBVZEy2D7oBn3zq59vBcI/0cywA9GT1
- TLSH T179F1F143AC176396850E83AFE5D9C9156273E60FD043AA39F5AC03140F5F24CE3EA9B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\github.com\corazawaf\[email protected]\tests\REQUEST-942-APPLICATION-ATTACK-SQLI\942320.js1⤵PID:1036