265f2a8d152f0dda673ac01f6dda23975556c2463810b96877c1d6cccb6f0244

Analysis

max time kernel
133s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 10:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Minuta.js
Size 2.0MB
Sample240603-l3149aca85
SHA256 c40a1569174a18bb6d9e2d34d84d937a4592e356893923ceecf3b3e84275cf09
MD5 04d8477ea50cf56f8fc67edf8c9038d0
SHA1 24bc22e3e2c6e5d8f74acd18fe24af15b52b60dc
SHA512 c474f78a80b301114b72878548da5b169764194fe126abe26b464103e7c6e10b218219a9aacf95e2e61f16b49a85cb2248e17a091d0d3b39c0ee0d84fd141145
SSDEEP 6144:rWVpdPbFyOkXM9kc0bOXeQ0D6Ij5diSM5WtunnxdgtgKJ2QwigORZ3s3fAxDZ16+:6bdfkXM6LbOXeQ0R
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

execution

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
4	2948	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	4	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Minuta.js
1⤵
- Blocklisted process makes network request
PID:2948

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads