3118ae5d1126fe2fd3a1290cfd9fe7bba6bdf9fcc16985938e9836d57d30f617 | Triage

Submit
Reports

Overview

overview

Static

static

3

Invoice-Au...df.lnk

windows7-x64

3

Invoice-Au...df.lnk

windows10-2004-x64

3

your/nowTh...As.dll

windows7-x64

your/nowTh...As.dll

windows10-2004-x64

your/orInH...eWe.js

windows7-x64

3

your/orInH...eWe.js

windows10-2004-x64

3

your/theTh...ay.bat

windows7-x64

1

your/theTh...ay.bat

windows10-2004-x64

1

Analysis

max time kernel
134s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
31-10-2024 16:18

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Invoice-August-09-2022pdf.lnk

Resource

win7-20241023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Invoice-August-09-2022pdf.lnk

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

your/nowThoseUseBecauseAs.dll

Resource

win7-20240903-en

icedid 3278368455 banker loader trojan

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

your/nowThoseUseBecauseAs.dll

Resource

win10v2004-20241007-en

icedid 3278368455 banker loader trojan

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

your/orInHowPeopleWe.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

your/orInHowPeopleWe.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

your/theThingWithInWay.bat

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

your/theThingWithInWay.bat

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

your/orInHowPeopleWe.js
Size

404B
MD5

06ebd04bb03b0c21b940c07bfa80d193
SHA1

8f6d75e2fafc8c448fd9e1ade8b3916058cf5efd
SHA256

fa29eb8864ca60b8483e75027ebe66a76305e0418033ba31d74a905549246338
SHA512

b3d95b661c17efe9e6bc0134be334bc75755c6fb86147f0a98b4d8fb48e33024a5bb8c5c364ac6cfe78be65cacfbfe85367cc07391b5f85b003894918c1ffd14

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\your\orInHowPeopleWe.js
1⤵
PID:544

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy