e9786c459bd577c41c3e728943f772e7622e9c1df543b0029a33d41e032f2a4a | Triage

Analysis

max time kernel
448s
max time network
532s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
19/01/2025, 20:44

Sharing

Report Analysis Logs

General

Target

At roblox/config/basic-languages/redshift/redshift.js
Size

11KB
MD5

c08941967ac5ba8cc4a2971b2c888456
SHA1

22d1a7f1e89d9850507d5eba78bf734764d7197f
SHA256

b461f7951effbf085cd7a090dd4e69e54f812a2543f55a4ecacaee7ef6649bdf
SHA512

9311c13be9e19c0062870bd4c2b92815bf4427056dbbbd6a2ec71ed76c8c66c4138f929776ce788c918c51813a61f0e05f00eac984b51fbcc16620958f3655ca
SSDEEP

192:hZnzLxzLJlx3dDC5QPsHoa2WMrtSCV0bPjNQoMyIG6r9TjasW:hBLxztR+MJ/WfCuFQobIGe9/asW

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\At roblox\config\basic-languages\redshift\redshift.js"
1⤵
PID:4776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads