6fc60098366fcadc7f08df3746881742f1fb30a91e2047b7b14951a6861dc214 | Triage

Resubmissions

28/03/2025, 09:56

250328-lybnsswnz8 3

28/03/2025, 09:55

250328-lxrcvst1fz 3

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28/03/2025, 09:55

Sharing

Report Analysis Logs

General

Target

resources/freeroam/server.js
Size

2KB
MD5

3edbc7d2b0441f4457e5b1752f993ed2
SHA1

698b492db080185f2ba40bc6d417492bafb58ab4
SHA256

20fca0ce172f7a6c07ff0c50d5f610b5739d6a9900da712aee25f4531fab8c32
SHA512

61c4095e743c89ddbec59f9e3036a76a638b24fb032301df71184a724990d2450788ffb5fc896f7fad0811cdfbc052c60441884db77a2b7dd8e15ef47a5b398d

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\resources\freeroam\server.js
1⤵
PID:2156

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads