52084aedb0e8da9ccb921e1f3430cad80c7ef56217dffbeec9caee0a9ff85e14 | Triage

Resubmissions

12/10/2024, 05:27

241012-f5h4kazgll 8

Analysis

max time kernel
433s
max time network
438s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 05:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

NullRAT-source/compiler.js
Size

19KB
MD5

33c6bf6ba8de501edabed6345a34e5f8
SHA1

efde12b4dfe361b355e83343ca3f3e89ab11dafd
SHA256

88220cbcb738fc27179dc68f31880dbb3634d0027065c4d0a144d25b8310da0c
SHA512

207d64d1c8008ec7ec0369f4f45f193af51fdc96f44755eba66c9b0348668b12a93c26c94f2a3dc9d9070769c15f96b55002aa90a9d757a74eeb07a46f760f79
SSDEEP

384:oyPEkz+AxusTpYGoHzITH4sHiIuHFOZ0Xf1s8oyDAAntmO:REk5KGIFVntp

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\NullRAT-source\compiler.js
1⤵
PID:4928

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads