Analysis
- max time kernel
1516s - max time network
1498s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
15/02/2024, 19:11
General
- Target Xmls/afterRiggersDiopter/abject/jujuistPuisneRadion/glucideAnsuAmorino.wsf
- Size 14KB
- Sample240215-xvx86seb91
- SHA256 b64392123a97e0635fd95912ac4968a8cc191e3e068096384624e57c2538464b
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Xmls\afterRiggersDiopter\abject\jujuistPuisneRadion\glucideAnsuAmorino.wsf"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
store.jfm
memory/2968-40-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-42-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-33-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-34-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-35-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-36-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-37-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-38-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-39-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-43-0x00000271B2260000-0x00000271B2261000-memory.dmp
memory/2968-32-0x00000271B2610000-0x00000271B2611000-memory.dmp
memory/2968-41-0x00000271B2630000-0x00000271B2631000-memory.dmp
memory/2968-0-0x00000271A9F40000-0x00000271A9F50000-memory.dmp
memory/2968-44-0x00000271B2250000-0x00000271B2251000-memory.dmp
memory/2968-46-0x00000271B2260000-0x00000271B2261000-memory.dmp
memory/2968-49-0x00000271B2250000-0x00000271B2251000-memory.dmp
memory/2968-52-0x00000271B2190000-0x00000271B2191000-memory.dmp
memory/2968-16-0x00000271AA040000-0x00000271AA050000-memory.dmp
memory/2968-64-0x00000271B2390000-0x00000271B2391000-memory.dmp
memory/2968-66-0x00000271B23A0000-0x00000271B23A1000-memory.dmp
memory/2968-67-0x00000271B23A0000-0x00000271B23A1000-memory.dmp
memory/2968-68-0x00000271B24B0000-0x00000271B24B1000-memory.dmp