e6eab533d9b34806636f700c12966f842fa081c9ca8b3765720e9d424c773e85 | Triage

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05-10-2022 22:20

Sharing

Report Analysis Logs

General

Target

7965/3601.js
Size

297B
MD5

2c118a6bcb30fbde2efae295413590f4
SHA1

daa108443713a3371b85a99f0a9a5de2209f711c
SHA256

9f82767ad3355f12c5b702d5976c565a9b7ae883d2e35b469cdde7c6d610ee28
SHA512

77b653d2692f6cdf83acd6cecd1f39b4973d9a20fcb1d902ec6004dcec7e7afbb930bc1c9510fc946529db2a0cd96c31bce8997b2b70c87ce09c51bd36d1eba9

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\7965\3601.js
1⤵
PID:900

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/900-54-0x000007FEFBD81000-0x000007FEFBD83000-memory.dmp

Filesize
8KB

Download