aca1a9c9b8902d00d582f58d6293c75cdf9eebd7dcc39e16921a97a1b2dbbd8f | Triage

Resubmissions

05-09-2024 10:59

240905-m3c8vsygpn 8

05-09-2024 10:58

240905-m272vazelg 3

05-09-2024 10:55

240905-mz8wcszeja 3

05-09-2024 10:54

240905-mzj71azdra 3

05-09-2024 10:52

240905-mysgzszdqb 3

05-09-2024 10:50

240905-mw9cqayfnk 3

05-09-2024 10:37

240905-mn29fazbpg 4

05-09-2024 10:34

240905-mmbebsydml 3

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05-09-2024 10:50

Sharing

Report Analysis Logs

General

Target

soshimeeaddons/commands/sa/termsim/index.js
Size

483B
MD5

7252134f8c705e1aed4364a421dd69ef
SHA1

8e0f1837850d0b256dd2712ed5cd72d239d84a65
SHA256

0659d8b6d86b20c69c75f0f2ee1d1ebb859f6ec432a133750ca03a8f6157fe38
SHA512

7dd2ff4e93976d80ae8b8830841d3422ee3c74bc6c940e2532854002d2a6e637616dea6589b422c05323bd5164b3007219f963791e1529470d391a4a915b8096

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\soshimeeaddons\commands\sa\termsim\index.js
1⤵
PID:3008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads