84dc69c179956cffeb9647847a13a45751b9333372ebbdf067c7d156fd0c0436 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

replay_mim...ld.ps1

windows10-2004-x64

3

replay_mim...ld.ps1

windows11-ltsc_2024-x64

3

replay_mim...url.py

windows10-2004-x64

3

replay_mim...url.py

windows11-ltsc_2024-x64

8

replay_mim...age.py

windows10-2004-x64

3

replay_mim...age.py

windows11-ltsc_2024-x64

8

replay_mim...ain.js

windows10-2004-x64

3

replay_mim...ain.js

windows11-ltsc_2024-x64

8

replay_mim...fig.js

windows10-2004-x64

3

replay_mim...fig.js

windows11-ltsc_2024-x64

8

replay_mim...ic.exe

windows10-2004-x64

1

replay_mim...ic.exe

windows11-ltsc_2024-x64

8

replay_mim...ime.py

windows10-2004-x64

3

replay_mim...ime.py

windows11-ltsc_2024-x64

3

replay_mim...005.py

windows10-2004-x64

3

replay_mim...005.py

windows11-ltsc_2024-x64

3

replay_mim...025.py

windows10-2004-x64

3

replay_mim...025.py

windows11-ltsc_2024-x64

8

replay_mim...es.exe

windows10-2004-x64

1

replay_mim...es.exe

windows11-ltsc_2024-x64

1

replay_mim...own.py

windows10-2004-x64

3

replay_mim...own.py

windows11-ltsc_2024-x64

3

replay_mim...act.py

windows10-2004-x64

3

replay_mim...act.py

windows11-ltsc_2024-x64

3

replay_mim..._py.py

windows10-2004-x64

3

replay_mim..._py.py

windows11-ltsc_2024-x64

8

replay_mim...tp.exe

windows10-2004-x64

1

replay_mim...tp.exe

windows11-ltsc_2024-x64

1

replay_mim...nts.py

windows10-2004-x64

3

replay_mim...nts.py

windows11-ltsc_2024-x64

8

replay_mim...lay.py

windows10-2004-x64

3

replay_mim...lay.py

windows11-ltsc_2024-x64

8

Analysis

max time kernel
898s
max time network
454s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 08:49

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

replay_mimic_cpp/build.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

900 seconds

discovery execution

Behavioral task

behavioral2

Sample

replay_mimic_cpp/build.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

900 seconds

Behavioral task

behavioral3

Sample

replay_mimic_cpp/find_dl_url.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral4

Sample

replay_mimic_cpp/find_dl_url.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral5

Sample

replay_mimic_cpp/inspect_score_page.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral6

Sample

replay_mimic_cpp/inspect_score_page.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral7

Sample

replay_mimic_cpp/main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral8

Sample

replay_mimic_cpp/main.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral9

Sample

replay_mimic_cpp/osu_config.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral10

Sample

replay_mimic_cpp/osu_config.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral11

Sample

replay_mimic_cpp/osu_mimic.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

replay_mimic_cpp/osu_mimic.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral13

Sample

replay_mimic_cpp/sample_time.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral14

Sample

replay_mimic_cpp/sample_time.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

Behavioral task

behavioral15

Sample

replay_mimic_cpp/test_5634005.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral16

Sample

replay_mimic_cpp/test_5634005.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

Behavioral task

behavioral17

Sample

replay_mimic_cpp/test_6787229025.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral18

Sample

replay_mimic_cpp/test_6787229025.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral19

Sample

replay_mimic_cpp/test_all_scores.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

replay_mimic_cpp/test_all_scores.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

replay_mimic_cpp/test_breakdown.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral22

Sample

replay_mimic_cpp/test_breakdown.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

Behavioral task

behavioral23

Sample

replay_mimic_cpp/test_cf_impact.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral24

Sample

replay_mimic_cpp/test_cf_impact.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

Behavioral task

behavioral25

Sample

replay_mimic_cpp/test_curl_vs_py.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral26

Sample

replay_mimic_cpp/test_curl_vs_py.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral27

Sample

replay_mimic_cpp/test_direct_winhttp.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

replay_mimic_cpp/test_direct_winhttp.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

replay_mimic_cpp/test_dl_endpoints.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral30

Sample

replay_mimic_cpp/test_dl_endpoints.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral31

Sample

replay_mimic_cpp/test_getreplay.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral32

Sample

replay_mimic_cpp/test_getreplay.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware execution persistence ransomware spyware

Report Analysis Logs

General

Target
replay_mimic_cpp/main.js
Size 65KB
Sample260908-krdddaweph
SHA256 84dc69c179956cffeb9647847a13a45751b9333372ebbdf067c7d156fd0c0436
MD5 5e011f98d3ef263ccaa623429e6e5717
SHA1 0eda8d093d83a7798697f611f8a657e7c71bc3a6
SHA512 6bd78be0ce2691f9b04daa3d0ed1984798e9e804104fbfe7b25b270fa7539eb00f4e18bffcdd3fe596149f4ef503efc047a24bfa3711460e9c828328088c3cd5
SSDEEP 1536:/xNv4bZ/5CLaKVgjZopV58UVfpLJAJYuHNMZi:/xVoZwVsor5ffpLJAJYAMI
TLSH
T1645343CA64D23D028C336A29DBD28419EF3658B38BE143547DCC74686FB64649374EBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\replay_mimic_cpp\main.js
1⤵
PID:2892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy