a88fd0b42a690163562c145de5b2ca8a25c616258b73ee5228e2f471c26df451 | Triage

Analysis

max time kernel
38s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28/09/2022, 16:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

frameworkCoincidence.js
Size

153B
MD5

ee8750055b866cb259668adcfc0c0f1a
SHA1

c210d48a156fc592b37bf853a6080baa64dff5bc
SHA256

a88fd0b42a690163562c145de5b2ca8a25c616258b73ee5228e2f471c26df451
SHA512

ad09a2db3dbcdaa58d60bc9f5c74ea8bb156a034c8d5c37e94b8cdc35501c299745e3a52116d32c549719cf246e55370d578286a60223c43647bb592d846cd59

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\frameworkCoincidence.js
1⤵
PID:784

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/784-54-0x000007FEFB871000-0x000007FEFB873000-memory.dmp

Filesize
8KB

Download