dffb606169831b2baea5de7c081ea21f11dfd70224ba90e3f39d4734981b02c6 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
25/07/2024, 18:53

Sharing

Report Analysis Logs

General

Target

zhongaclient by zhong 0.0.7 p75/inject/main.js
Size

1.3MB
MD5

c3297d7ed1105aff7d21cef81b0e7183
SHA1

64bf427e26e8891b9254edf05d15b8d556c79fe5
SHA256

049a6a84adcfb1460ba8a334c6d12157f3c629b3891a535fc1d2d07e8ef8d779
SHA512

88cc618a25ff4d23a62f81802cd3d41d85de3c5c51aa0525ec14bcc179f2dd5fffa1e2d83ccd85c3711993ec031d3f165c25f7594aa27389d3cc992adc7a1871
SSDEEP

12288:8BELf3E5dwWEU5WW2YWMEyna5d5XCKI4e+p+/+O+r+U+OZtUfcJL06J6SoBskdZ6:8BELf3hwYPe9BoMVQfgtjpuk34hXcjM

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\zhongaclient by zhong 0.0.7 p75\inject\main.js"
1⤵
PID:1108

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads