1d2c73bff499484b33b1457320ff967d48469a96ff41874075bd4e48b6f72906 | Triage

Resubmissions

03-01-2025 18:12

250103-wtdygawnhv 10

03-01-2025 18:09

250103-wrsc3swnbz 9

Analysis

max time kernel
723s
max time network
729s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
03-01-2025 18:09

Sharing

Report Analysis Logs

General

Target

PolarBoot.js
Size

1KB
MD5

23eb8f9e7d4b2191a925c0acec78d846
SHA1

023ea9d53ad1d26695c7f9b9f655a8b6bf627eb4
SHA256

1d2c73bff499484b33b1457320ff967d48469a96ff41874075bd4e48b6f72906
SHA512

c638e22185d10767e6025d444f912be71292c022e8f483efadab31adc6f1a8210922527d2adbc880b99e27941b1eece8960253f28d50a771df8c079e160a23d8

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\PolarBoot.js
1⤵
PID:3000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads