aca1a9c9b8902d00d582f58d6293c75cdf9eebd7dcc39e16921a97a1b2dbbd8f | Triage™

Resubmissions

05/09/2024, 10:59

240905-m3c8vsygpn8

05/09/2024, 10:58

240905-m272vazelg3

05/09/2024, 10:55

240905-mz8wcszeja3

05/09/2024, 10:54

240905-mzj71azdra3

05/09/2024, 10:52

240905-mysgzszdqb3

05/09/2024, 10:50

240905-mw9cqayfnk3

05/09/2024, 10:37

240905-mn29fazbpg4

05/09/2024, 10:34

240905-mmbebsydml3

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/09/2024, 10:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
soshimeeaddons/commands/fps/index.js
Size 250B
Sample240905-mn29fazbpg
SHA256 821f7fec9d13258a01d644dc2117430a53c32fabf89be6cfc5e6c7a3d054103a
MD5 e61f712f5182321fd8bfd63acd33334b
SHA1 97eeae758d852b6a35c793e3f888ac00033706ec
SHA512 5cb45afe3befc0622827347a12c3c28cb4f07f4352980f940ef652b1192be02ebf9e28e682d448686612450bbb009536edda99996595e84abed7743fe729a0d6
MD5 SHA1 SHA512

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\soshimeeaddons\commands\fps\index.js
1⤵
PID:2092

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads