f329ef2e93cac6dea7c9ba1a80c268ae50f851b2ee8ccb1d135a240e82232309 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28/09/2024, 14:47

Sharing

Report Analysis Logs

General

Target

便宜房产网 v1.0/admin/addnews.js
Size

47KB
MD5

15280bf1a69ce49132e03cfdf998cb2a
SHA1

5cefde8cb50806e31583e0a337243cb62c4a48a0
SHA256

60c3daa8837d09a2aba8efd9eea2797ea5a4fb7817e54c5bf51d7c72ac26eab7
SHA512

1e1360e36ab7e84ab30b4128a82d0755c789b1cd5b85a8f6d823bd4256c084c9e72fd4e10cfb9be5ada4ca18c104f5afcf0017b36093d9413817caed89d28804
SSDEEP

768:57zdikA+uyfdJc4r6gBVD0FJc4r6gBVDOGUTyYeou6fQRwSN4ObbGPMj9Dl4wP:5XwWdJtvD0FJtvDOGUTyYeou6YRwSN4E

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\便宜房产网 v1.0\admin\addnews.js"
1⤵
PID:2976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads