dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1 | Triage

Analysis

max time kernel
149s
max time network
154s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
05-10-2023 22:44

Sharing

Report Analysis Logs

General

Target

jquery-3.3.1.slim.min.js
Size

68KB
MD5

99b0a83cf1b0b1e2cb16041520e87641
SHA1

bc5836992c0b260496ba520fe1336d499bf06eb7
SHA256

dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1
SHA512

33ea8c2353c745c61c3a927378995a59b555c76249c8f23065ab3ca2bedd73decb64ea248ef6e97d1c729a156d9492f28e2177c06cabd0524e0380cb38d2d52f
SSDEEP

1536:hLiMgk2gULYoXUmZx6+VWNL0kC8W90qU9JR7hDqEDqWSNB1gZFy/HG+FP:I8w0qU9JTtH3aP

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	2764	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2764	AUDIODG.EXE
Token: 33	2764	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2764	AUDIODG.EXE

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\jquery-3.3.1.slim.min.js
1⤵
PID:2800

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:2660

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x590
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads