0f81b2681475f1014dddda909b1a95b2b83d3f70e502bdc23256016a8d188d4b | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19/09/2024, 14:09

Sharing

Report Analysis Logs

General

Target

tmblog3/upfile/admin/photor.js
Size

8KB
MD5

509b30059de273f602d683d94f22d868
SHA1

4f30d265afc6c7e5f756b6d4f59383256e30d0ca
SHA256

c5e41bed7bf28c4a45aa4fa3d40ab45ae2e74af5a307126e652f77c7c283486e
SHA512

b376161d1b9dec1be9a47e8adee1d93b74dbaead508438b7f22cdf60f51172bd33891d73624eea74f68f00b5ab53e3b5e4bd361750264509e749390b8071991c
SSDEEP

192:rI9VGdJZLhb1yjOX+NqlFGDr6epO5pDtkjr6ap8HKlIW+jv+3rhVjv530sb:rI94dJ9yjOuNqlu6epO5pJkjr6ap8HKD

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmblog3\upfile\admin\photor.js
1⤵
PID:1588

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads