We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
25 August 2024, 16:29
Analysis environment:
Windows 10 Pro, build 19045, x64
Invoice-876597035-003-8331775-8334138.js
MD5:
F43A0279183CF2C0EEC72397251878D4
SHA1:
2D81F6CFB49F992494B78BFE82FA142C5004A554
SHA256:
DAB98819D1D7677A60F5D06BE210D45B74AE5FD8CF0C24EC1B3766E25CE6DC2C
Analysis result
Threat level:
Malicious activity
Full analysis:
Analysis Invoice-876597035-003-8331775-8334138.js (MD5: F43A0279183CF2C0EEC72397251878D4) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Sends HTTP request (SCRIPT)
wscript.exe (PID: 6724)
wscript.exe (PID: 6980)
Creates internet connection object (SCRIPT)
wscript.exe (PID: 6724)
wscript.exe (PID: 6980)
Uses sleep, probably for evasion detection (SCRIPT)
wscript.exe (PID: 6724)
wscript.exe (PID: 6980)
Opens an HTTP connection (SCRIPT)
wscript.exe (PID: 6724)
wscript.exe (PID: 6980)
SUSPICIOUS
Reads security settings of Internet Explorer
ShellExperienceHost.exe (PID: 3276)
INFO
Manual execution by a user
wscript.exe (PID: 6980)
notepad++.exe (PID: 6660)
notepad++.exe (PID: 6556)
notepad++.exe (PID: 6272)
Checks supported languages
ShellExperienceHost.exe (PID: 3276)
Reads the computer name
ShellExperienceHost.exe (PID: 3276)
Threats
No threats detected