aca1a9c9b8902d00d582f58d6293c75cdf9eebd7dcc39e16921a97a1b2dbbd8f | Triage

Resubmissions

05/09/2024, 10:59

240905-m3c8vsygpn 8

05/09/2024, 10:58

240905-m272vazelg 3

05/09/2024, 10:55

240905-mz8wcszeja 3

05/09/2024, 10:54

240905-mzj71azdra 3

05/09/2024, 10:52

240905-mysgzszdqb 3

05/09/2024, 10:50

240905-mw9cqayfnk 3

05/09/2024, 10:37

240905-mn29fazbpg 4

05/09/2024, 10:34

240905-mmbebsydml 3

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/09/2024, 10:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

soshimeeaddons/config.js
Size

16KB
MD5

670e630f6b343be2e25bc7d5ff2a0e27
SHA1

0ed4ca2652b655d5a82059f598f0ba2516b032f2
SHA256

f7f64299e26fb5b848383b91bc069092a54f5af7dc00d8894dabe3f5c5792228
SHA512

1e7531555413200d6633131d53dce2574395e4ea3dfada5ed9cb0bfd1d6732058ce84388f4a1c20825ca7224b4b882e1e14be920077d5813f3ba172d5967455a
SSDEEP

192:4i2l5VKSdhijEFt9k6hV9izjM7sST1lija:4isr8+bhV+M79lua

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\soshimeeaddons\config.js
1⤵
PID:2644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads