5b9bbb2e3bcbf2524e38b2c3b637b1485ee2205bdfd8bdfe896f7cfe9c6d041c | Triage

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
24-09-2022 23:04

Sharing

Report Analysis Logs

General

Target

scabs/functioningReceptive.js
Size

207B
MD5

0534ceeac6a5c7cf61a8a2ef961d807f
SHA1

f26256a9aeeb5491923f9f38c2b30642cad7976a
SHA256

6e70f1b3cf9b66c98f2dbc14b588ea04b7197210dd4cda38a0dc21fcf114e156
SHA512

36b63f0d8c223c84fefc8632232ca0546b5e3b6edaa4e37ce099814ee1f5b21c5cb84e5d17955c87189dbf08798215699633d008ed41935c3cec8752c9563e7f

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\scabs\functioningReceptive.js
1⤵
PID:1964

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1964-54-0x000007FEFBFE1000-0x000007FEFBFE3000-memory.dmp

Filesize
8KB

Download