Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
09-10-2023 22:08
General
-
Target
button.js
-
Size
6KB
-
MD5
af9230c7495336fc8f5bd24375828fe1
-
SHA1
1906ed00c51642c0cf6abf01129c95b9cc3d44a8
-
SHA256
2bfea0f926933574818c3d0bfb16dd1907411904c145edf8cdd699b8f226a919
-
SHA512
aa77ddce359722a9b7989bfb33e5faa3d5391d99f9a099f974504d56b8d390736c25fe7a0c44edcc12c3c25ef885fc1d8bcb270c13aa93e2fb515dfa305418fb
-
SSDEEP
96:5akGk0DuBst6imOiwiB/CqTZDnAjCvNghrWJdRG1mRp7jJhYyR3jwm:hGk0DVbB5ZqTZDnAjMChqFG1mp7jzJjN
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\button.js1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD58a6fea8b025e648fd6bfc8d1aa22b1a9
SHA1da5136e09af69a4d404e3ea35fac1c18b38997b4
SHA2569bdd5189b7c85edd68ea7c307b530ea07018f05f4822a6bcb9603b3507125a55
SHA5122a1d015609a8980b12f2cb19732c1cb10a3c6153c58d23a9257a2732f2a7659c4624ef3942fde7f3588d3a6adb23e621a422bc5ff1798035e05a3d4e9f38fc61
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB