75f4e9cb71e583ca3f8b19691b5754adb9c981580762137f82443e1eec468f9c | Triage

Analysis

max time kernel
146s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
05-12-2024 14:24

Sharing

Report Analysis Logs

General

Target

wordpress/wp-includes/Text/Diff/Engine/shell.js
Size

5KB
MD5

7443bb26aa932003ba7742d0e64007c6
SHA1

02f2fbe5aadcca0e21639b89556028e8704dccc4
SHA256

a376895680e77451496664a3465712506e3d6a77d5f78271e34f903f769d9200
SHA512

632c6b3b3355eeef476b9c4daac0a34b4a2713228f256f1681ca1c6a188146f73eb0d6f6989e0ea5515e81b5cf39ab071b40bdd08a1170b8ca3b3306bd63aa86
SSDEEP

48:cHjcqmoCa/lmj/iCUTh7F+le+loutelLuFtVhvPcW1e8xVOFytVVGB4O8U/PH4Qg:ltoHKrEFNutkLuFvhsWtEytVoBMUnY8y

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\wordpress\wp-includes\Text\Diff\Engine\shell.js
1⤵
PID:4776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads