20d10e741e4e96e2598b104740f7a71875e67a64fe5f3be2fcb54a518ab4fab2 | Triage™

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/05/2024, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Size 12KB
Sample240524-e5z7eadd43
SHA256 04e6a7526ed1dc51f4d1f9b25b56f0c7826367ae3f2468a8622e359663ee5526
MD5 0eb1f0ffcb4dd17c22b20a3d7d6654db
SHA1 bae3d2be867f62c5f8d7e769248f053c50a1ab8d
SHA512 f9362cb8a84312aa3f12c93fa268f5950ebd575abb54f3778a5f3aa935e1c7685b7bf78e8a6a3eabe67094914ec90143ecdd384a4341f000fda41b686b486d97
SSDEEP 384:x7/thyc+f7zLajrZhVoaOt2yyVizJvcGwkD:F/thyc+f7zyoaOt2yqizJLvD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\LuaSocket\lua\socket\http.js
1⤵
PID:1136

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads