Analysis
-
max time kernel
144s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
14/01/2024, 05:40
General
-
Target
5a6d4e9f1e4eb89fee77cb29343dd352.js
-
Size
16KB
-
MD5
5a6d4e9f1e4eb89fee77cb29343dd352
-
SHA1
63bda0fab1822e2c65140be0a1a99c60dd3e3680
-
SHA256
e70fc9abc0f3c9bcde15104105b66c2f71c2cd5ae33f5b41cfc94d19409ee117
-
SHA512
bf172b43d7205e77ccdd78960b4b26e5fe02468ebbfd5287d1d9ecd15192e3920f0dd561982170762b94e4c95ae98875c409ebdc4de9ffb17faad8e024ed0511
-
SSDEEP
192:BheXdgBb9juRdwarkRfn9zJl8Q2cQ2SaefTg8gKPCr3GKVRUOYR/4YQHHgCVZrHQ:aRdk9zTwaefTg8g0sRUVEnc9
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\5a6d4e9f1e4eb89fee77cb29343dd352.js1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5df51887b526f05b055e4cc732362fc83
SHA13727632457da5dcf8cd529daeb6b5ffb238d1806
SHA25652ff7710091e52fc0b53e2f8bcdea7146357a09d8179224966232bd2420e0979
SHA512f56fed79eafa954f9e4c11d17dc69809d69e8d77bf81e1bf06bd06fb9753a52ad5463613faeb0333249a96d24e331970788a5fae925593602dbaefe1d8546b0c
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB