e4C7Fwop.wsf

Communicates with host for which no DNS query was performed (1 event)

host	185.252.178.121

Wscript.exe initiated network communications indicative of a script based payload download (1 event)

Time & API	Arguments	Status	Return	Repeated
HttpOpenRequestW Sept. 5, 2023, 8:40 a.m.	connect_handle: 0x00cc0008 http_version: flags: 4194320 http_method: GET referer: path: /gen.txt	1	13369356	0

Network communications indicative of a potential document or script payload download was initiated by the process wscript.exe (2 events)

Time & API	Arguments	Status	Return	Repeated
HttpOpenRequestW Sept. 5, 2023, 8:40 a.m.	connect_handle: 0x00cc0008 http_version: flags: 4194320 http_method: GET referer: path: /gen.txt	1	13369356	0
send Sept. 5, 2023, 8:40 a.m.	buffer: ! socket: 716 sent: 1	1	1	0

Connects to an IP address that is no longer responding to requests (legitimate services will remain up-and-running usually) (1 event)

dead_host

185.252.178.121:222