05778f75ae4979f7f72c0e4ef8bc7b4677cf54c79f805fd6d15a2f45e9a4a951 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
12/08/2024, 03:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

易百万网上商城 v1.2/123.files/Function.js
Size

6KB
MD5

16f6b6d63c0207ac5e5906c81d9272ab
SHA1

b71fc6efdc9f7e9c21912aeeedf02b745346732d
SHA256

618b2b99389ae5ceabbf0322964071c1399d533b5583f4bb3a4b65e775f69001
SHA512

71d0c9732160d041aaed093f184568d0def21a3627ac09575cc7ac10eb151628ea59e3c290ca00320366fa09ff92da8e8e940e35373ed3df70421b4a8346068c
SSDEEP

192:8qMDMAwZieHbinfiF3Sc/KW9Z/KNNVhDMhKb2ZMVufSvrdadSLHlHsn0uZH/4rhf:XHAMi0infiFiqhZCziMV82Rafn0vlZd

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\易百万网上商城 v1.2\123.files\Function.js"
1⤵
PID:2768

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads