b82edd7205a215c5cce4ee969d9ca9b542771bf7e8764ce5b04f992dcfba9a0b | Triage

Analysis

max time kernel
44s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
28-09-2022 16:20

Sharing

Report Analysis Logs

General

Target

gaffes/actualistsMollusk.js
Size

148B
MD5

343cb80cd400649c78995faa09e1c9f8
SHA1

3a3b123c8cb96c45934cb01fee2e434e982f8e16
SHA256

ed593fb6ac8e3f6d00d4cd5e1086d07943b7783b43346b0cffd51a06fa76b05c
SHA512

d2604746d9cf5015434683ae7684234a874063dbd61ae907ec033d2ddd598a388cb69e001efc2795be41c641fad61048ee21dde4c7ce39ba0260e1b029f7835a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\gaffes\actualistsMollusk.js
1⤵
PID:1280

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1280-54-0x000007FEFB9E1000-0x000007FEFB9E3000-memory.dmp

Filesize
8KB

Download