cf0b47eafa7787a698bc8dbb62d18f1d16d0659ff7bd7e6312ccb50b08b754b6 | Triage™

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
03/02/2025, 13:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
net8.0-windows/Astral_assets/Injection/discord-injection.js
Size 87KB
Sample250203-qte8mstrak
SHA256 1df7b0b11b9eca886e8ad118efe0196ca3202f08a2f803c9ed62c99b14d7b386
MD5 f09e312599375709a60d60e87d4317ee
SHA1 55dab351087947ecbf2a745a47476c2dbcfe907e
SHA512 87d78a313eb2515b65d4b33b1ff787d17ad48180b17b03c30cd342a9ece0049e40e411ac91f950b3fece43658624cffb9808da3fbdf1f30e9ff0be3c1e54be76
SSDEEP 1536:tK4SxabNH1fyDsH4ntTVPV3yTMHQHiM+ta0QUta+Yx4Y7tn1/yDsHYXicLjFfVnM:jb11fyDsH4ntT1V3yTMHQHiMMYx4Y71n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\net8.0-windows\Astral_assets\Injection\discord-injection.js
1⤵
PID:2260

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads