249bdaa4332b3e1a3a2148d4fd587a42bd48615af556d1c72da51c55bb2ca697 | Triage™

Resubmissions

03/08/2024, 15:17

240803-spc9laxcpn6

03/08/2024, 14:57

240803-sbjt8awhmk7

03/08/2024, 11:48

240803-nyplrssbmr6

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
03/08/2024, 11:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/app.js
Size 1.1MB
Sample240803-nyplrssbmr
SHA256 eaddb78f5f24d73c75e3f016457e79f0c1685d5add4ec5647efdcb3e5841b7b5
MD5 f64750a616dcdafc38fa3fdaa966fbc5
SHA1 358b77012f4a1a9c96f6370d4f7b96ab55e302fa
SHA512 46221e0b9c11674847b9de39a23effa339ece2fb15ca6036e1bc4444f0dbe1ad6ded144ed2ae511525034210842614d295f001dab64b360c97fb9e2cf3f9e984
SSDEEP 12288:yJT2cdLKo/l0xsrDIFpVpZ3uQqPjSFxfPfViQt1YCOx:0T2cdKrlt1js
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\resources\app.js
1⤵
PID:2140

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads