67d5991928a372f5f4b6e0628177bcf922d4eb083a927f293a81e8c702cf533b

Analysis

max time network
131s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
07/06/2024, 16:35

Target
file.js
Size 922B
Sample240607-t35rfabb5v
SHA256 67d5991928a372f5f4b6e0628177bcf922d4eb083a927f293a81e8c702cf533b
MD5 37642557f26d3c292c58a65e8851b011
SHA1 f7b5c96303aeb1174d0860c0a99f4a6241112af4
SHA512 95f8dc10d6a0d01fe5ef26cc245b58b0777a276c7d6b819a3f7abe388f7a04ed3c59d81797cec14b0d71965a0d2d8144f5d0ea922a2ef115e24d5ec3da255345
MD5 SHA1 SHA512

Score

6^/10

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

Looks up external IP address via web service 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact