8cd97dcbcee1d9f8ec2b8e921aed42f0cba7cf47e9713c5f31972e8121252929 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
09/05/2024, 04:18

Sharing

Report Analysis Logs

General

Target

chestnut/SpryAssets/SpryValidationPassword.js
Size

20KB
MD5

d6be38fb42c2e9618c9d5f2664078c19
SHA1

77f553236f588cece0fe2be4859e8f3220231a1f
SHA256

3df1b7719a1aa90d70ae337b76b6253b01ede9afa038b290498c3abf4ab54027
SHA512

fcd8d5f7d08ee9fb2eaf3323121c08c2cb7bcc5943b2ca54188c6f4c9d33b1b4e70fac713925ede55be7070ed99d66bb68e5a372e1555dcbfd795af68c3830d9
SSDEEP

384:O/FIw5TgIhq4YId7osa5Pf2Anopd8WvvEcWKOaiSfbjwPjlKPm+bG1boAGWhEwEU:25Tg+Umnwu5bG1lGWiw5JwN5cNz3NJ

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\chestnut\SpryAssets\SpryValidationPassword.js
1⤵
PID:2116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads