7c32fe586adcc55d0b9b4a2944d22a8c5cb29894ef1ea6f30b074a2b1588c422 | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/09/2022, 13:58

Sharing

Report Analysis Logs

General

Target

swindles/signatorySin.js
Size

189B
MD5

dd54e89411501fedf5580aad7afd9c31
SHA1

696c17f85a64bd4eb3f15153d4bcf87e70467b19
SHA256

bf8aff3cd4fee0902669a8151fb9187128aa2d8a2609879f86939ce06001e224
SHA512

f4a598a077632b12635e41c5601a44d8920907d2d972370225d6c011f484b1303e0cc88637579d5d5f9825056f585c77dd66242908d9f3372c5f06b68c4978ad

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\swindles\signatorySin.js
1⤵
PID:1912

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1912-54-0x000007FEFC1F1000-0x000007FEFC1F3000-memory.dmp

Filesize
8KB

Download