0f81b2681475f1014dddda909b1a95b2b83d3f70e502bdc23256016a8d188d4b | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19-09-2024 14:09

Sharing

Report Analysis Logs

General

Target

tmblog3/upfile/admin/book.js
Size

8KB
MD5

86fcb40fedc5d45a35c2cdb6707f3975
SHA1

2fa7127d2de18fdc139ed37d931364abbc24908f
SHA256

8b18d2a814d1c2d2534163af292c5ba15b0428eae02302baa9bbeaea57b43435
SHA512

6ca77bfed4fa6ae0cd921c2e1575edaf25c8bb821c5eb218f6a5752ffa0a1b303bf204546e1c4080e924b0cef7f69f47650623d3d8d365c9f2a6adafb2abb6f6
SSDEEP

192:rI9VGdJZLhb1yjOeqPxjDg6epTWzDtkR1En6nb8Hv5kW+jv+3rhVjv530sb:rI94dJ9yjObPxg6epTWzJkR1u6nb8Hv7

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmblog3\upfile\admin\book.js
1⤵
PID:2360

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads