20d10e741e4e96e2598b104740f7a71875e67a64fe5f3be2fcb54a518ab4fab2 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
24-05-2024 04:32

Sharing

Report Analysis Logs

General

Target

$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Size

9KB
MD5

7309f4294ae4abb4f6ae657b2a98d488
SHA1

327d143e9f7a1835a58fdaf569a8f7a937fcf2c0
SHA256

9ba5df91091c46f0ffe0a93ace577a4833c92cbec1742113d0a2da9e568f9a10
SHA512

a44d2603af63828e8a0b1fbc7455305c616e5bae4a351b429e7e94a6aa7e4d6425f69d57d6a44ba87ee5d29accfc01c1f3ff288652120ff8f08a66543d357895
SSDEEP

192:GsooRaLonJfMxBs6gZO2zMAcTcGZqxOU6iOeBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7U6iOeBRkfYtW

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\LuaSocket\lua\socket\ftp.js
1⤵
PID:2128

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...