aca1a9c9b8902d00d582f58d6293c75cdf9eebd7dcc39e16921a97a1b2dbbd8f | Triage

Resubmissions

05/09/2024, 10:59

240905-m3c8vsygpn 8

05/09/2024, 10:58

240905-m272vazelg 3

05/09/2024, 10:55

240905-mz8wcszeja 3

05/09/2024, 10:54

240905-mzj71azdra 3

05/09/2024, 10:52

240905-mysgzszdqb 3

05/09/2024, 10:50

240905-mw9cqayfnk 3

05/09/2024, 10:37

240905-mn29fazbpg 4

05/09/2024, 10:34

240905-mmbebsydml 3

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/09/2024, 10:50

Sharing

Report Analysis Logs

General

Target

soshimeeaddons/commands/sa/termsim/numbers.js
Size

2KB
MD5

2c535054b65b89a95fea04b38f39d957
SHA1

1d654f613c85ba31bb7ab642ffffd4bde0326481
SHA256

3aef84efc3fbfd4fa279c0126d3162aaddc858b99c2f42fa92aeef1a58a32e36
SHA512

024593cd65608978cc71cf243947f1be1b879ba5c8f812213416193b61c7b6468c9f1fd3184528d1b65d08168be05d88880b034cba0966c135b83daeff1ede63

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\soshimeeaddons\commands\sa\termsim\numbers.js
1⤵
PID:2852

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads