bd0ef1d7654394b817189894517246b9e5e6e818c3de3c257987370e08ebbe6f | Triage™

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/06/2024, 08:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RoPro/js/page/friends.js
Size 27KB
Sample240608-klj9qsbd98
SHA256 d6f4aed452baa3ec1e764bb8c0ee847d2715d109aaf089e9ca204a6101c67dc6
MD5 819f2f9fd2f255f12637d45d1eba1109
SHA1 bb95a140172963f2276b9b2e061fb6c020347dcf
SHA512 b9ac9e8e76794f9ac23f291d5e0acda4055f153e21bf11376b78652eb041a9e3ec0041a358b5e72c90ddf8b3d053883b1a7a532b74d45021d6bf78f0c2a71393
SSDEEP 768:Bu9uTu4u3uRuiubutuUuUuvukuGuAusuyukuIuOunu/uUuzunuPUuB79uKuxDRa8:Bu9uTu4u3uRuiubutuUuUuvukuGuAusl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\RoPro\js\page\friends.js
1⤵
PID:2364

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads