05778f75ae4979f7f72c0e4ef8bc7b4677cf54c79f805fd6d15a2f45e9a4a951 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
12-08-2024 03:59

Sharing

Report Analysis Logs

General

Target

易百万网上商城 v1.2/123.files/LeaveWordRe.js
Size

1011B
MD5

45a4577163e39b57ff3b9aa1393a869d
SHA1

1948e057437d3d022f14bf738040c7b41a46f2ec
SHA256

595ead693905c7d0837718886152f9003921a2b7e8321700a09bba9e98b98037
SHA512

de1caab7192b62670ed412247ff9bfab72da34529f1befd9bae0d004f0435f12b7b8dde5caa5f07a86156ef21e803eacdc04558686a9c73230c89c8a1cff5adc

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\易百万网上商城 v1.2\123.files\LeaveWordRe.js"
1⤵
PID:2484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads