350f2b7af2310de1eec502397eb73b1e5c909b989294a1e988911c07a8ec616c | Triage

Analysis

max time kernel
147s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
05/07/2024, 21:40

Sharing

Report Analysis Logs

General

Target

$PLUGINSDIR/skin/res/knockout.js
Size

166KB
MD5

e5cee722fd4224a379bb4a6f2af1f12c
SHA1

319e9e3526bf39c72071df15f4310c652dd0a72a
SHA256

d77a2c496323dc9fcb6be027f7758611c498f754e3df8b5d91e4a70c058cd98a
SHA512

87327a9e491afc55f85a821f4305a18c1d47dfb828f3cf3b44b276d987b535bdbaa4668c372e5d3c4c74ef4819a1b784a1faca0fd533be3ce6981f3cabbc6c88
SSDEEP

3072:Q34wxu/OXJ+PywwA9+blJbQccfuhfC1OeHS1Uyjvz4gauzZ1SOd:QM9+9CPxyI0

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\skin\res\knockout.js
1⤵
PID:1976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads