Overview

overview

7

Static

static

3

cdafd40ca5...2f.exe

windows7-x64

7

cdafd40ca5...2f.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...tc.dll

windows7-x64

3

$PLUGINSDI...tc.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

1

$PLUGINSDI...ss.dll

windows10-2004-x64

1

$PLUGINSDI...ge.dll

windows7-x64

3

$PLUGINSDI...ge.dll

windows10-2004-x64

3

$PLUGINSDI...n12.js

windows7-x64

1

$PLUGINSDI...n12.js

windows10-2004-x64

1

$PLUGINSDI...ime.js

windows7-x64

1

$PLUGINSDI...ime.js

windows10-2004-x64

1

$PLUGINSDI...ket.js

windows7-x64

1

$PLUGINSDI...ket.js

windows10-2004-x64

1

$PLUGINSDI...ftp.js

windows7-x64

1

$PLUGINSDI...ftp.js

windows10-2004-x64

1

$PLUGINSDI...ttp.js

windows7-x64

1

$PLUGINSDI...ttp.js

windows10-2004-x64

1

$PLUGINSDI.../tp.js

windows7-x64

1

$PLUGINSDI.../tp.js

windows10-2004-x64

1

$PLUGINSDI...re.dll

windows7-x64

1

$PLUGINSDI...re.dll

windows10-2004-x64

1

$PLUGINSDI...re.dll

windows7-x64

1

$PLUGINSDI...re.dll

windows10-2004-x64

1

$PLUGINSDI...ib.dll

windows7-x64

3

$PLUGINSDI...ib.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    146s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/03/2024, 09:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $PLUGINSDIR/LuaSocket/lua/socket/ftp.js

  • Size

    8KB

  • MD5

    a8fbe980f396bccfdaa5671a981e60cd

  • SHA1

    c2ae1816545e52347d359475e846997056865db1

  • SHA256

    cb373cd081a8ffbc71f67d359a0d2c7b8bc7a4db7ef720364700a534773b2bfd

  • SHA512

    89332cd5079cc3b1e2ab2553e7425919a2463b7aacfc51371d0c431160dfc4a0b3812597cc1db43d476c5332d20334d1d904b1edcc2e6ab81415514abe9ff307

  • SSDEEP

    192:Ib9n9btwO8RiYH21IcNhvU632OzjMxwcjvu0xT+FHWWkbssMPP3IaeevDZYgnVJc:Ib99twO84z1dfvU42O3MFjvu00kdM34x

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\LuaSocket\lua\socket\ftp.js
    1⤵
      PID:2056

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads