d98cf4a908148155fbf73bf7b134f2050b5ec74cc47a84f7196b00b13a34ed93 | Triage

Analysis

max time kernel
129s
max time network
143s
platform
windows10-1703_x64
resource
win10-20240221-en
resource tags

arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
submitted
15/03/2024, 21:54 UTC

Sharing

Report Analysis Logs

General

Target

Trojan.JS.Youareanidiot-main/Mostly Online/Idiot!_files/you.js
Size

1KB
MD5

275e9ad779553160d5cdc5f55be61c0c
SHA1

5282f731e0efec0481421f8d6a4bea24638af290
SHA256

c6869abc2db9309edeab76c79e44e4e91e500ceb37329906c4a5944228619af4
SHA512

45be29b7f11a2d8d5624763e9b0a64cfefce4626153ff2aaca72219bf6ba217910f4166539938f9eebf7f31f1f203754d8ca8426ae33b4ff2bd63845ae3a9bad

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Trojan.JS.Youareanidiot-main\Mostly Online\Idiot!_files\you.js"
1⤵
PID:776

Network

DNS

11.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

11.227.111.52.in-addr.arpa

IN PTR

Response
DNS

200.201.50.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.201.50.20.in-addr.arpa

IN PTR

Response
DNS

240.221.184.93.in-addr.arpa

Remote address:

8.8.8.8:53

Request

240.221.184.93.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

11.227.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

11.227.111.52.in-addr.arpa
8.8.8.8:53

200.201.50.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

200.201.50.20.in-addr.arpa
8.8.8.8:53

240.221.184.93.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

240.221.184.93.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads