1b6abb2e822a9f93d05f02a72527ac5eb5cee3e22f97af05fa60b9b7613fe898 | Triage

Analysis

max time kernel
141s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05-10-2022 17:21

Sharing

Report Analysis Logs

General

Target

1b6abb2e822a9f93d05f02a72527ac5eb5cee3e22f97af05fa60b9b7613fe898.js
Size

3.3MB
MD5

3a4e2bd746cf5a27646f3f8373e85230
SHA1

a93fb8527a080715749ff687f5dad2dafa7612cc
SHA256

1b6abb2e822a9f93d05f02a72527ac5eb5cee3e22f97af05fa60b9b7613fe898
SHA512

06da4dad36433da575d02dbf5569be393735012718341aea03f410217123bc6f5328a384b95a819a35b57004fdb881984ade7b814376792c3e344ae86a09db1f
SSDEEP

24576:hj4KmDPva2to6/xr+GnUMjV6H2wXBuXpCpuM2COmHJXpOQEHciLsQ3gN6JpsBqO8:xMzz

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\1b6abb2e822a9f93d05f02a72527ac5eb5cee3e22f97af05fa60b9b7613fe898.js
1⤵
PID:1752

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads