2b90e389578f65caca0148d3e79eeb9bdafadb8345267033a0603a98dfd7d7ed | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
20-05-2024 10:24

Sharing

Report Analysis Logs

General

Target

$PROGRAMFILES/PAZUƴӡ/js/pazucloud.js
Size

32KB
MD5

ecbeec6a5ad90c0b40791b2a5c6c3af6
SHA1

7201cd7aee832c6a815cdc2b7df399fa545037fd
SHA256

01b73c70a745daf6b6ff99d9eae9da908dfb5c7c5f5acc4a719029e1a30d4070
SHA512

d4dccf480b2f563b3acd471896995538a76cb2dec9d4b17561cbc7c6b9beb11834e37b9ac8c640ecee618fef3b8d0cf89ddb6bf77cfc9f51831c14b26e8f7db7
SSDEEP

384:ww6D8dmZNEErmFWG67/26eEM695ahf3Dos+Uj3+AwaNISaECZQyp9o4B6aXQAy2u:ww6Vp/P9sLl+q+AwcgmKtBDd+

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES\PAZUƴӡ\js\pazucloud.js
1⤵
PID:2884

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads