aca1a9c9b8902d00d582f58d6293c75cdf9eebd7dcc39e16921a97a1b2dbbd8f

Resubmissions

05/09/2024, 10:59

240905-m3c8vsygpn 8

05/09/2024, 10:58

05/09/2024, 10:55

05/09/2024, 10:54

05/09/2024, 10:52

05/09/2024, 10:50

05/09/2024, 10:37

05/09/2024, 10:34

Analysis

max time kernel
94s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/09/2024, 10:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

soshimeeaddons/commands/ping/index.js
Size

401B
MD5

60b241ee9fdfd58dc7dbe3c3058e0ee1
SHA1

18012e4bd835cda85d9aba5e3c453a1d81c0e3a2
SHA256

3423bb2e2145613cfed47c0e16f8ffcb54dea5b79e2e58afe9ef33b594a333ee
SHA512

d92d91e7935c93dfb1f4edf86c6267d4f9c551abbac4f9c84dec7b0e528e36eb245096978a64a9e2bc3e96de4b92fa9b4ba9b0e9359e92da596a018405baba6b

Score

3^/10

discovery execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
5096	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\soshimeeaddons\commands\ping\index.js
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...