Overview

overview

3

Static

static

1

upload/adm...nc.ps1

windows7-x64

3

upload/adm...nc.ps1

windows10-2004-x64

3

upload/adm...map.js

windows7-x64

3

upload/adm...map.js

windows10-2004-x64

3

upload/adm...ure.js

windows7-x64

3

upload/adm...ure.js

windows10-2004-x64

3

upload/adm...inc.js

windows7-x64

3

upload/adm...inc.js

windows10-2004-x64

3

upload/adm...x.html

windows7-x64

1

upload/adm...x.html

windows10-2004-x64

1

upload/adm...inc.js

windows7-x64

3

upload/adm...inc.js

windows10-2004-x64

3

upload/adm...tpl.js

windows7-x64

3

upload/adm...tpl.js

windows10-2004-x64

3

upload/adm...x.html

windows7-x64

1

upload/adm...x.html

windows10-2004-x64

1

upload/adm...tpl.js

windows7-x64

3

upload/adm...tpl.js

windows10-2004-x64

3

upload/api/index.html

windows7-x64

1

upload/api/index.html

windows10-2004-x64

1

upload/cou...tpl.js

windows7-x64

3

upload/cou...tpl.js

windows10-2004-x64

3

upload/cou...tpl.js

windows7-x64

3

upload/cou...tpl.js

windows10-2004-x64

3

upload/cou...int.js

windows7-x64

3

upload/cou...int.js

windows10-2004-x64

3

upload/dat...x.html

windows7-x64

1

upload/dat...x.html

windows10-2004-x64

1

upload/dat...x.html

windows7-x64

1

upload/dat...x.html

windows10-2004-x64

1

upload/dat...x.html

windows7-x64

1

upload/dat...x.html

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-07-2024 23:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    upload/admin/dlg_selectpicture.js

  • Size

    2KB

  • MD5

    d2538fefb5c9f3d668d1adc34ac099fa

  • SHA1

    24116cecfd4280ae6369e33e6a98e8cac495f644

  • SHA256

    c694ee7fbe1474588b9112fd6f09c012e8af07dc7b0394299bf4eba83ec26bbb

  • SHA512

    679e23f3544bd3843908bef418ccd845b1cd7f7ad9961d5f910d8f3f0c67a33d19824c90bde40e2ff877760feb666919cf4491d925e498b15dffe4c3dd78b434

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\upload\admin\dlg_selectpicture.js
    1⤵
      PID:4784

    Network

    MITRE ATT&CK Matrix ATT&CK v13

    Initial Access

    Execution

    Command and Scripting Interpreter

    1
    T1059

    JavaScript

    1
    T1059.007

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Resource Development

    Reconnaissance

    Replay Monitor

    Loading Replay Monitor...

    Downloads