a1941786149857faebfd4f2731022d8af6aaa984b981bffd40bd123472b0beb4 | Triage

Resubmissions

14/07/2024, 14:27 UTC

240714-rslvgatgnm 10

Analysis

max time kernel
118s
max time network
126s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 14:27 UTC

Sharing

Report Analysis Logs

General

Target

resources/app/node_modules/adm-zip/methods/deflater.js
Size

1021B
MD5

41fd6791497f7d74ee56a7753e08da66
SHA1

bd62d07bfe703da89172fcfeaa8848d6ba5c68b4
SHA256

6dc41b2460594cfa5136b797653c166b2f7403820a40f2fca17cca35a5de1b5f
SHA512

5f16aeb477321470986a8c9807ebf3b75e979e5fb34156028ef56f44f38c4f4d72d9d086784e9dfedeffa61f91f973b6ac7e7ba1730eebd86bb549de2dbb4761

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\resources\app\node_modules\adm-zip\methods\deflater.js
1⤵
PID:1992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads