148ce8730207f9f7f82c54eab0806ea229038f3e8deded31929b5510460f7d61 | Triage

Analysis

max time kernel
611s
max time network
885s
platform
windows10-1703_x64
resource
win10-20240404-es
resource tags

arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
21-05-2024 20:07

Sharing

Report Analysis Logs

General

Target

resources/app/node_modules/adm-zip/zipEntry.js
Size

11KB
MD5

c553c1da54ed2015dea9f514d4dfbd42
SHA1

fc47ac41e724cac3f6deab99730276fb7e4b76a0
SHA256

699358b454fd68983c363f2df22ada2fac0ad3ebfc4890f80efe7e49461f8c78
SHA512

808c6912f5dcd11afe4f130dbadc28911fa5402eb60cf2e2df66fd82c80a74772a9527cb731d4b16ea67abf6255e8f5a28e81955bfc78af90f5e6df98cce8dd4
SSDEEP

192:SCNPhBeY942jhUHaD8QIyrjHqgshbokySgyuqyDYyyyn32S2WsYlr98bvxrgLxOB:SKBeMJjXQQdq9EYUfp2SpsGr9WNgtI

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\resources\app\node_modules\adm-zip\zipEntry.js
1⤵
PID:692

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads