Analysis
-
max time kernel
144s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
31/10/2023, 18:37
General
-
Target
b75a2ec3b44d2d2091a142a603a400355ff14d06c95bbdcb0c452cda3461f929.js
-
Size
127KB
-
MD5
1f41f40975a1631c82a09190ae1e27c9
-
SHA1
b838e401ce716141f8cd03bc9f4a4ae8557cf9f1
-
SHA256
b75a2ec3b44d2d2091a142a603a400355ff14d06c95bbdcb0c452cda3461f929
-
SHA512
c9db868293fb369ad6f67b1f058f220cad4505ec58d9c35ec1453b252a37f08c11ac53bae6616090096c0230c707d20e05b5bbca7702cd3bb51d5c31bf0ddeb1
-
SSDEEP
3072:/jL+dKMubHspZQ513Rqyy7XZmgMmY04yU:/HkKtbcZyy7XQge
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\b75a2ec3b44d2d2091a142a603a400355ff14d06c95bbdcb0c452cda3461f929.js1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD53a7412a371c436cc35243370919b100d
SHA1af6b376c62ea7165714c97b337ccc9bdb721b273
SHA256ba7f001ce88a9dbee791d1ba3fdc9da48ad02b620c840f6d665bc17823801290
SHA5125bebe605a1effba14bcc1cb0c2deb9bcf3aa52f66b47c31efcc3e31d85ec46bd7810122834b8a44e1f5a4aa0df3a7942543f744579fdea9fad2a6cffce6519b0
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB