f329ef2e93cac6dea7c9ba1a80c268ae50f851b2ee8ccb1d135a240e82232309 | Triage

Analysis

max time kernel
118s
max time network
125s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28/09/2024, 14:47

Sharing

Report Analysis Logs

General

Target

便宜房产网 v1.0/admin/addwz.js
Size

47KB
MD5

50af7aa9219ef48e3d00806b8c7d3def
SHA1

cc5215e8843bfefc3131d5d8329181642705923e
SHA256

ee3d3f8719461f9df83cc860871d1ed2574f740717ed991cb036336921ddcf03
SHA512

6b98b25ef605f51fdd8a5c5601843e986995e62009e34ae164b7a8f5a71240b8102303e8c13120fc701ae99053116f7f3d036d92b0ae3a915db8bd3fd6f9b66b
SSDEEP

768:27zdikA+DyfdJc4r6gBVD0FJc4r6gBVDOGUTyYeou6fQRwSN4ObbGPMj9DlQwP:2X9WdJtvD0FJtvDOGUTyYeou6YRwSN46

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\便宜房产网 v1.0\admin\addwz.js"
1⤵
PID:2132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads