Find similar analyses in TI Lookup

Analysis date (UTC): 5 September 2024, 20:37Analysis environment: Windows 10 Pro, build 19045, x64

managements%3f16553a25e45250a41fd5&endeds=MIGpq&JStx=59bf050d37df88a9-ade43358-eaa1220b-0571422b-0f33e6aa150e86bafd0ed4&Ld=9d7502d88d752a27b1d00587309184b5a215

MD5:180F63B858EC220FCCE837E11BC1DBEC

SHA1:79F764B23B9767A10CC21B9798B233D97726B236

SHA256:798563FCF7600F7EF1A35996291A9DFB5F9902733404DD499E2E736EA1DC6FC5

Analysis result

Threat level:Malicious activity

Full analysis:Analysis managements%3f16553a25e45250a41fd5&endeds=MIGpq&JStx=59bf050d37df88a9-ade43358-eaa1220b-0571422b-0f33e6aa150e86bafd0ed4&Ld=9d7502d88d752a27b1d00587309184b5a215 (MD5: 180F63B858EC220FCCE837E11BC1DBEC) Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

Opens an HTTP connection (SCRIPT)

wscript.exe (PID: 6716)

Uses sleep, probably for evasion detection (SCRIPT)

wscript.exe (PID: 6716)

Creates internet connection object (SCRIPT)

wscript.exe (PID: 6716)

Sends HTTP request (SCRIPT)

wscript.exe (PID: 6716)

SUSPICIOUS

No suspicious indicators.

INFO

The process uses the downloaded file

WinRAR.exe (PID: 7116)

Manual execution by a user

wscript.exe (PID: 6716)

Threats

No threats detected