c48b1d0562f49f921b34fa58c952a4dd991d111003c3543f8852fdddb0b0da4f | Triage

Resubmissions

18-12-2024 18:26

241218-w3lpnsykeq 10

18-12-2024 17:16

241218-vtjchswle1 10

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18-12-2024 18:26

Sharing

Report Analysis Logs

General

Target

Moon/workspace/vape/Libraries/entityHandler.js
Size

8KB
MD5

5084a3e5fe80975893d9658430f8b067
SHA1

6cabb6cadd0b46f3e152f85a0fec49f9c76f4a49
SHA256

6e87834fefebf2d3749bf29c72eb9626e50cc5defc384c1564b042b7b2a2f421
SHA512

f94662fd80a1eac542ee860c9f76f777b5a1b6077367b4c1813e9c7be43aeb37e7d43b372fd20412a4cca811a22b790e5e12fe2f95a3b980446459e3af1bd3d5
SSDEEP

192:cACGCPCSV6sa7T+kuOlpKk7EyJZksIqFZ2vbpRdvBsJ3lnMtA:w7qrf+kukpKUEyrH2vlo3lnMtA

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Moon\workspace\vape\Libraries\entityHandler.js
1⤵
PID:2888

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads