Overview

overview

10

Static

static

Claim_Copy.lnk

windows7-x64

3

Claim_Copy.lnk

windows10-2004-x64

3

fathomed/b...zed.js

windows7-x64

3

fathomed/b...zed.js

windows10-2004-x64

1

fathomed/p...ts.cmd

windows7-x64

1

fathomed/p...ts.cmd

windows10-2004-x64

1

fathomed/sausage.dll

windows7-x64

10

fathomed/sausage.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    43s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    20-09-2022 18:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fathomed/beaujolaisTraditionalized.js

  • Size

    189B

  • MD5

    4d43cb5f26c85422173ab520cd403cce

  • SHA1

    d44be1685e9bcda7a5a22a3fd3de127152121af6

  • SHA256

    3cb43ba70696688a381574d12564c1440566daa58cd026103a564cb754ecc785

  • SHA512

    09d540f61fde812db7817c3f347c70a501d45440db849d59a892072c9be8b470ed0be4a5a2a35db85e4fd6fbf5a7084581cdd7e723d7501c3625415ae67bd651

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\fathomed\beaujolaisTraditionalized.js
    1⤵
      PID:1708

    Network

    MITRE ATT&CK Matrix ATT&CK v6

    Initial Access

    Execution

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    System Information Discovery

    1
    T1082

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1708-54-0x000007FEFB7F1000-0x000007FEFB7F3000-memory.dmp
      Filesize

      8KB

      Download