Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
06-11-2023 22:00
General
-
Target
dtb-m.js
-
Size
13KB
-
MD5
17d5556290f824b58a130e7f6a5db5d8
-
SHA1
3eafe6f52c5b153ed19cbff77eb8d1877327a736
-
SHA256
1c4e3003755d1a0d72116458dff81df000f053894e64f60459a544eeb6f055ab
-
SHA512
007009f03e0b3d677dcc4690e99908e33812c3c370d637126a6c0b42bc9b514dbec4f7aa2505769d5111b743ef7da57c912930870622133d6d200c905ec582de
-
SSDEEP
384:LHJ2kLj5UGeSiJsAJcehNBjjV1Td1Zlts+d6I7:LvdMWAPpj51PZlts+d6I7
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\dtb-m.js1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5e5c2b7071d78f47092d6e57270828644
SHA12449ec02cd2ecda73ed885145bf7d91d633f6748
SHA2568d61d78c1b0267546bd26581bd237dea91441ba83a3f67e2725b211393d4c28c
SHA512159a656b16285f5a328acd5add466ab2b98f3f53f409ab00c06c58639accf9416beb2e4d1b32e5a471c78e716e7f94f13c4aff5990521cf83ca9a87bdf2086f4
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB