d981d6d8221ccbf1501cb19aef7d25fac9e987070a05bb3e6654b736a7cc4a57 | Triage™

Analysis

max time kernel
452s
max time network
1175s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
02/06/2024, 13:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PDennSploit v1.2/lib/editor/ace/keybinding-emacs.js
Size 39KB
Sample240602-qkmlcsdc6v
SHA256 aa6c3e199f6542d5babb28ea675db7676cc83236287c4606ae361698a82e4d6a
MD5 d65352bb104d3c489077796fb64734eb
SHA1 a34e6943bd19e0e3176a467437d6cd9f4d235a7b
SHA512 00726e2133a34df67618e226cac8bd98c7a0d0920642c28c642781563909190852a0ead2dc51890c635dfdc49990cdb9af146fe8255d3485a9f936924fda0d40
SSDEEP 768:PVbWWKf0qhJVKa1MrD1+ppp+uaXFBoxCaGxsbqP43lIkyVCa89NvleJXUsS8ou3u:PVbWWKf0qhJ11MrD1+ppp+uaVBoxCaG4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\PDennSploit v1.2\lib\editor\ace\keybinding-emacs.js"
1⤵
PID:3160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads