Resubmissions
09/04/2024, 22:29
240409-2edl2seh521009/04/2024, 21:30
240409-1cgegscb241009/04/2024, 20:57
240409-zrlgbaah881009/04/2024, 20:24
240409-y6z3kshg871009/04/2024, 19:08
240409-xtargseg53709/04/2024, 18:06
240409-wp88tahc3y709/04/2024, 16:22
240409-tvlzcscb557Analysis
- max time kernel
598s - max time network
601s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
09/04/2024, 19:08
General
- Target resources/app/node_modules/adm-zip/headers/mainHeader.js
- Size 4KB
- Sample240409-xtargseg53
- SHA256 3269b558fd8990df8ae1f500268e0512854c04bffefcaa0e584360de1809b84a
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\resources\app\node_modules\adm-zip\headers\mainHeader.js1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2116-0-0x000001CB43DA0000-0x000001CB43DB0000-memory.dmp
memory/2116-16-0x000001CB43EA0000-0x000001CB43EB0000-memory.dmp
memory/2116-32-0x000001CB4C210000-0x000001CB4C211000-memory.dmp
memory/2116-34-0x000001CB4C240000-0x000001CB4C241000-memory.dmp
memory/2116-35-0x000001CB4C240000-0x000001CB4C241000-memory.dmp
memory/2116-36-0x000001CB4C350000-0x000001CB4C351000-memory.dmp