c18a51240ec2a5d3cdb3a4be5a40af799334d07149f80867e40ef7112a9ef733 | Triage

Analysis

max time kernel
16s
max time network
18s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 15:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

redgw3.3forAC/redoagw/editor/language/zh-cn.js
Size

19KB
MD5

ef0bede8cbd45dee75bbd169f1d0847b
SHA1

3763a9a2319420982f39975e3a1c903f111068f7
SHA256

0551db931dd7a3e214fcce76e189e0bbf6fbf3639f7afea7fddaa0a120ecb631
SHA512

c36d03af074a8e7e529df0ba1d61de3e46f7f1cd0e821e980ae6f9b0c07979be2e28f38313dbaeae3e88d206c33dce2674154c28cbf58ec5499e8d88200eb7e0
SSDEEP

192:KD156yOZHCsdKRRBdBLFYVM606hnU/g4rccZhP8EeVHQRcep0cZwx0J8c:KJbENcRtN1Zg4rnIZR/ep0cZsg5

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\redgw3.3forAC\redoagw\editor\language\zh-cn.js
1⤵
PID:1476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads