64ac35ae2c9dc29efb1342f9748c02ba4edab217ececf060f2338e5069c7d5f5 | Triage™

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/06/2024, 17:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DaBaby/data/allonator/cli/cli.js
Size 35KB
Sample240618-vpgccswhjp
SHA256 4fcaca4a039994d020334ebde62c27f195112f8ea5b0abd6397b5493ed1858ab
MD5 5a37c840e4b9d8433ea7c4d81c4d040f
SHA1 bc9bc769044a9d47b64bce096d37ac9fbca62060
SHA512 9da0f0238e6972e798c05a014c2f0ff1d26d6a41c6234cfdc3ac5e3c64df17d46ae1bb40a14c17ebbb1e45f6ec966e14502626e7998c24200fdda2ed419d11a4
SSDEEP 768:3nMwWdVX0030UeThMRHI1n1TIrooJBpjvmWcin:3nMNI1n1TIXT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\DaBaby\data\allonator\cli\cli.js
1⤵
PID:2520

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads