d981d6d8221ccbf1501cb19aef7d25fac9e987070a05bb3e6654b736a7cc4a57 | Triage™

Analysis

max time kernel
457s
max time network
1180s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
02/06/2024, 13:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PDennSploit v1.2/lib/editor/ace/ext-whitespace.js
Size 6KB
Sample240602-qkmlcsdc6v
SHA256 259efc69734bf5bb921aa709efbd6c4b54c8e27bfbea2c4880e62b1c8d4ca9a9
MD5 d08030a8f6057b63643bacf4cee162b0
SHA1 a25f68b20a3808d562b59973e1d565e5464da4ae
SHA512 8b00bc81be977b7ba4a900632f5213253ae9c9cc2089c131cf04bcce54ee382688dbd33a8487d33531e2464f20b2144dc6c439ce0c444ba64c4fdef7a556c078
SSDEEP 192:o9zmW3Hv/jAbgJ8wWoRrTivqI6ekVoudhtbCyik6mWvRv8abmgEQVgQf3Hlgtf3B:OzmWTAbgtWoh+k5P/6VRUab1EQiQf3H0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\PDennSploit v1.2\lib\editor\ace\ext-whitespace.js"
1⤵
PID:1172

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads