b4acfbc4174469c9aff54043442223afe559dab84954e4b51b64756fe2b045ac | Triage

Resubmissions

27-09-2024 20:25

240927-y7q63azgkh 10

27-09-2024 20:17

240927-y2m78axelm 10

Analysis

max time kernel
30s
max time network
34s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
27-09-2024 20:25

Sharing

Report Analysis Logs

General

Target

GMAIL/Leaf.xNet.js
Size

276KB
MD5

b033607c30c9e7a25ba3e478b0a00e18
SHA1

f5d51a5a92be9f5dc7b355ce08f6476d57017bb9
SHA256

52631a555c91918bf0922474667dc6bb3576f1eaece34480ae8addabcc7d0f08
SHA512

44f6641e785ed352fb0b68b82a745a58e59de03513314baaa2b1be3ae2162655747ffb9590ddff4a081df85a325b30670c1351e6f0b238e8eac5fba6e8808d12
SSDEEP

6144:qad+PiKgyxxE15ywFLOpXDKwEwXAwTeBufMJ3fMVd4PMvMP35M93P:qaoPiKgy+ywFLOt+X+AceB6w3fkd4Ps7

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\GMAIL\Leaf.xNet.js
1⤵
PID:1876

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads