Overview
overview
6Static
static
1github.com...NS.ps1
windows10-2004-x64
6github.com...NS.ps1
windows11-21h2-x64
6github.com...ST-.js
windows10-2004-x64
3github.com...ST-.js
windows11-21h2-x64
3github.com...T-.ps1
windows10-2004-x64
6github.com...T-.ps1
windows11-21h2-x64
6github.com...es.vbs
windows10-2004-x64
1github.com...es.vbs
windows11-21h2-x64
1github.com...ds.ps1
windows10-2004-x64
6github.com...ds.ps1
windows11-21h2-x64
6github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...37.vbs
windows10-2004-x64
1github.com...37.vbs
windows11-21h2-x64
1github.com...ICA.js
windows10-2004-x64
3github.com...ICA.js
windows11-21h2-x64
3github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...160.js
windows10-2004-x64
3github.com...160.js
windows11-21h2-x64
3github.com...370.js
windows10-2004-x64
3github.com...370.js
windows11-21h2-x64
3github.com...390.js
windows10-2004-x64
3github.com...390.js
windows11-21h2-x64
3github.com...150.js
windows10-2004-x64
3github.com...150.js
windows11-21h2-x64
3github.com...320.js
windows10-2004-x64
3github.com...320.js
windows11-21h2-x64
3github.com...110.js
windows10-2004-x64
3github.com...110.js
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win11-20260513-en
General
- Target github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
- Size 4KB
- Sample260602-wvbvhadt6l
- SHA256 6528a1deb9ff5c1dc2bc446871fac1d12d18d9d9d9ad14a0f4f0a909532262dc
- MD5 80de45b90d97c834ad0ab50038503125
- SHA1 a784469b86e93aeea25a96024eb5f8e8ea83c985
- SHA512 bd5bfa9825a1cddd7efa7ac5c71a2c553a1e32f5d28415fe2c047ba9f0939fe196a1c1881531a5924a477743961e94829614cb5e5e2be453ef1b680ebb79f4be
- SSDEEP 48:KTeITJcTyU6JWXOz/w5Qv72F7KQyEDHMw6bh5QM3/rHnNHv3krYCY5l2F7KQyC:KzlJ8Al/E7WHZEGK
- TLSH T1FC913213DF0B2369514D91B9A8E9E95CA236E1EFC045E539F1EC530C5F4A34CA2A28F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\github.com\corazawaf\[email protected]\tests\REQUEST-949-BLOCKING-EVALUATION\949110.js1⤵PID:696