8eb09f7c414a4ccd0d7aaff6ed919018c2976f26f271cc1cf0952d88a4c15466

Login
Reports

Overview

overview

Static

static

nextcloud/...der.js

windows10-2004-x64

nextcloud/...der.js

windows11-ltsc_2024-x64

nextcloud/...ser.js

windows10-2004-x64

nextcloud/...ser.js

windows11-ltsc_2024-x64

nextcloud/...ait.js

windows10-2004-x64

nextcloud/...ait.js

windows11-ltsc_2024-x64

nextcloud/...er.ps1

windows10-2004-x64

nextcloud/...er.ps1

windows11-ltsc_2024-x64

nextcloud/...er.ps1

windows10-2004-x64

nextcloud/...er.ps1

windows11-ltsc_2024-x64

nextcloud/...er.ps1

windows10-2004-x64

nextcloud/...er.ps1

windows11-ltsc_2024-x64

nextcloud/...dy.ps1

windows10-2004-x64

nextcloud/...dy.ps1

windows11-ltsc_2024-x64

nextcloud/...or.ps1

windows10-2004-x64

nextcloud/...or.ps1

windows11-ltsc_2024-x64

nextcloud/...ace.js

windows10-2004-x64

nextcloud/...ace.js

windows11-ltsc_2024-x64

nextcloud/...nt.vbs

windows10-2004-x64

nextcloud/...nt.vbs

windows11-ltsc_2024-x64

nextcloud/...ent.js

windows10-2004-x64

nextcloud/...ent.js

windows11-ltsc_2024-x64

nextcloud/...tor.js

windows10-2004-x64

nextcloud/...tor.js

windows11-ltsc_2024-x64

nextcloud/...der.js

windows10-2004-x64

nextcloud/...der.js

windows11-ltsc_2024-x64

nextcloud/...ool.js

windows10-2004-x64

nextcloud/...ool.js

windows11-ltsc_2024-x64

nextcloud/...der.js

windows10-2004-x64

nextcloud/...der.js

windows11-ltsc_2024-x64

nextcloud/...der.js

windows10-2004-x64

nextcloud/...der.js

windows11-ltsc_2024-x64

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 12:23

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/ApiProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/ApiProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/AbstractRestParser.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/AbstractRestParser.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/PayloadParserTrait.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/PayloadParserTrait.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/XmlParser.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/XmlParser.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/QueryParamBuilder.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/QueryParamBuilder.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/RestSerializer.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/RestSerializer.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/XmlBody.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/XmlBody.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Validator.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Validator.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/AwsClientInterface.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/AwsClientInterface.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudDirectory/CloudDirectoryClient.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudDirectory/CloudDirectoryClient.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudSearchDomain/CloudSearchDomainClient.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudSearchDomain/CloudSearchDomainClient.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudTrail/LogFileIterator.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CloudTrail/LogFileIterator.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CognitoIdentity/CognitoIdentityProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CognitoIdentity/CognitoIdentityProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CommandPool.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/CommandPool.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/CredentialProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/CredentialProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/InstanceProfileProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/InstanceProfileProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Report Analysis Logs

General

Target
nextcloud/3rdparty/aws/aws-sdk-php/src/CommandPool.js
Size 5KB
Sample260924-pkwctstdla
SHA256 8eb09f7c414a4ccd0d7aaff6ed919018c2976f26f271cc1cf0952d88a4c15466
MD5 88f3620f5eaf1b7f68a483c968df217b
SHA1 461d3cad66c5205e92db70792d9d92084d86696d
SHA512 21cfbfeaf90f6a8e102cf5613a6d0c19eb34cb97749e343fe8359990059030c9e66a0b836634759dbca2eec4dd246add1467d9d577b4aa21c208e3b6bde98e77
SSDEEP 96:Y00S+dUVrzt5xXj9lU3jZIphnfnFtCVAuZ5yfUxTuPrwXoCgAL:Y09+dUVXt5Bj9y3jSFnFtCVAufysxTuG
TLSH
T12AB1325729ED36334013B8B0E20FA256D921132F212D4943746EAE7CAF59F38D795A9C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\nextcloud\3rdparty\aws\aws-sdk-php\src\CommandPool.js
1⤵
PID:2080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads