Overview

overview

7

Static

static

7

YouTube_base.apk

android-9-x86

YouTube_base.apk

android-10-x64

YouTube_base.apk

android-11-x64

42_js_modu...fig.js

windows7-x64

1

42_js_modu...fig.js

windows10-2004-x64

1

advanced_q...5e6.js

windows7-x64

1

advanced_q...5e6.js

windows10-2004-x64

1

audio_trac...f9b.js

windows7-x64

1

audio_trac...f9b.js

windows10-2004-x64

1

caption_tr...28c.js

windows7-x64

1

caption_tr...28c.js

windows10-2004-x64

1

captions_s...c8e.js

windows7-x64

1

captions_s...c8e.js

windows10-2004-x64

1

cast_error...est.js

windows7-x64

1

cast_error...est.js

windows10-2004-x64

1

info_card_...50f.js

windows7-x64

1

info_card_...50f.js

windows10-2004-x64

1

listen_fir...d7a.js

windows7-x64

1

listen_fir...d7a.js

windows10-2004-x64

1

paid_conte...859.js

windows7-x64

1

paid_conte...859.js

windows10-2004-x64

1

playback_s...1bd.js

windows7-x64

1

playback_s...1bd.js

windows10-2004-x64

1

playlist_a...c30.js

windows7-x64

1

playlist_a...c30.js

windows10-2004-x64

1

quality_sh...e99.js

windows7-x64

1

quality_sh...e99.js

windows10-2004-x64

1

quick_qual...2ad.js

windows7-x64

1

quick_qual...2ad.js

windows10-2004-x64

1

root_89b39...92c.js

windows7-x64

1

root_89b39...92c.js

windows10-2004-x64

1

sy0_89b394...92c.js

windows7-x64

1

Analysis

  • max time kernel
    166s
  • max time network
    174s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 04:16 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    root_89b394ad1fbbe92c.js

  • Size

    10KB

  • MD5

    d2b9f8f8ee022c139d0f5b9e7e737a70

  • SHA1

    2528f7465ad32af145f9b0c594d90e44bad912f0

  • SHA256

    ab3f37748ff05c44e6f9d44ca356e0c6644b44fa4325fbbbe619f9156017117b

  • SHA512

    61704816e432b2291910a17b0b4a7eb8b65a5fa8c924d54fa8b608d8c3122306f2556e6043fbabe79d5e5a29df454564397f3c299b6c9467542c60a9263eaaba

  • SSDEEP

    192:B4+EC6kIy79SoGuGQnGpdRcfAuo5wEgiQdyDLgohaAnGuo5L+ylCRS1jZ692EI/i:B4+EC6kIyZmHQGpfcYuo5pLQ4cohaCq2

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\root_89b394ad1fbbe92c.js
    1⤵
      PID:3644

    Network

    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      8.3.197.209.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.3.197.209.in-addr.arpa
      IN PTR
      Response
      8.3.197.209.in-addr.arpa
      IN PTR
      vip0x008map2sslhwcdnnet
    • flag-us
      DNS
      73.31.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      73.31.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      54.120.234.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      54.120.234.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      241.154.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.154.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      2.136.104.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.136.104.51.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      29.81.57.23.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      29.81.57.23.in-addr.arpa
      IN PTR
      Response
      29.81.57.23.in-addr.arpa
      IN PTR
      a23-57-81-29deploystaticakamaitechnologiescom
    • flag-us
      DNS
      158.240.127.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      158.240.127.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      86.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      86.23.85.13.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      86.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      86.23.85.13.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      86.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      86.23.85.13.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      86.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      86.23.85.13.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      86.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      86.23.85.13.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      206.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      206.23.85.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      38.148.119.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      38.148.119.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      19.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      19.229.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      5.173.189.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      5.173.189.20.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      8.3.197.209.in-addr.arpa
      dns
      70 B
       111 B
       1
      1

      DNS Request

      8.3.197.209.in-addr.arpa

    • 8.8.8.8:53
      73.31.126.40.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      73.31.126.40.in-addr.arpa

    • 8.8.8.8:53
      54.120.234.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      54.120.234.20.in-addr.arpa

    • 8.8.8.8:53
      241.154.82.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      241.154.82.20.in-addr.arpa

    • 8.8.8.8:53
      2.136.104.51.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      2.136.104.51.in-addr.arpa

    • 8.8.8.8:53
      29.81.57.23.in-addr.arpa
      dns
      70 B
       133 B
       1
      1

      DNS Request

      29.81.57.23.in-addr.arpa

    • 8.8.8.8:53
      158.240.127.40.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      158.240.127.40.in-addr.arpa

    • 8.8.8.8:53
      86.23.85.13.in-addr.arpa
      dns
      350 B
       5

      DNS Request

      86.23.85.13.in-addr.arpa

      DNS Request

      86.23.85.13.in-addr.arpa

      DNS Request

      86.23.85.13.in-addr.arpa

      DNS Request

      86.23.85.13.in-addr.arpa

      DNS Request

      86.23.85.13.in-addr.arpa

    • 8.8.8.8:53
      206.23.85.13.in-addr.arpa
      dns
      71 B
       145 B
       1
      1

      DNS Request

      206.23.85.13.in-addr.arpa

    • 8.8.8.8:53
      38.148.119.40.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      38.148.119.40.in-addr.arpa

    • 8.8.8.8:53
      19.229.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      19.229.111.52.in-addr.arpa

    • 8.8.8.8:53
      5.173.189.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      5.173.189.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.