7a557f511f3d63bc23b139d609d3c7470710296662a1c58f608b02f5ab637b71 | Triage

Analysis

max time kernel
36s
max time network
36s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03/10/2024, 06:03

Sharing

Copy URL Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

a.js
Size

155KB
MD5

525e29098a2ef9ef7d4ce36e16f2aef5
SHA1

6fee8bed1ce591c6b233514e1ad8a12d42ab0fa2
SHA256

7a557f511f3d63bc23b139d609d3c7470710296662a1c58f608b02f5ab637b71
SHA512

74c8dabaeee45a61a430b4a00340df4cda9e9bcb35b9c694e7a8cf17eae9627b920d766e6c1a96a7e3c89c6a428d147ffcb698eeaad4b879453c9aba6546f507
SSDEEP

3072:MIHm8nkR+NLZaoA9V+hg3XcqJ0avMpzi+7qqHpBuY:gMNLZaoA9V+hg3XcqJ0eMpzi+0Y

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\a.js
1⤵
PID:2648

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0
1⤵
PID:2372

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x1
1⤵
PID:1276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1276-1-0x0000000002AB0000-0x0000000002AB1000-memory.dmp

Filesize
4KB

Download
memory/2372-0-0x0000000002D90000-0x0000000002D91000-memory.dmp

Filesize
4KB

Download