199e0fe45d95b255e25cfefd21f9689396bb925493cbccc3951c1c2414fe8e31 | Triage

Analysis

max time kernel
48s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
27-09-2022 17:08

Sharing

Report Analysis Logs

General

Target

maliciously/undercutTestator.js
Size

228B
MD5

03784779bbbe57ebaaf7e4fcb29e9f36
SHA1

18a73861dcd63f3a20570bff0abb35cc71fe9e25
SHA256

61e0c6effda57ebed69e34c07ab2330cd312529aa498683503486347d53d2bae
SHA512

da8414cd28fec47e2471e96ec96059ad2dd1961644436592d575dcb2853502a9b0381636bcc9d6193ac2e68e7aaa84e40514aee7398c17b4b1e035a1373f0d1f

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\maliciously\undercutTestator.js
1⤵
PID:1268

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1268-54-0x000007FEFB8B1000-0x000007FEFB8B3000-memory.dmp

Filesize
8KB

Download