Overview

overview

10

Static

static

10

Decompiler.exe

windows7-x64

7

Decompiler.exe

windows10-2004-x64

7

GameStealer.py

windows7-x64

3

GameStealer.py

windows10-2004-x64

3

Saveinstance.js

windows7-x64

1

Saveinstance.js

windows10-2004-x64

1

Select Your game.py

windows7-x64

3

Select Your game.py

windows10-2004-x64

3

Analysis

  • max time kernel
    138s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-04-2024 14:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Saveinstance.js

  • Size

    51KB

  • MD5

    ac2119ffe6a27c58a12fcca7c4c4a653

  • SHA1

    09cc54886389b21d23d679aea9ad3d1306949467

  • SHA256

    71079c6f00505e66c44f19445cc8333b8cd04e43347cc42750b2e4782f324e28

  • SHA512

    6f1e46fda5eb904ddeaca561608e116ecf1db56cb36fea901887dead9a3f7f77187f67ad9edd7ed465e4db37867a5c3978b87b02435bd2455ddf8e352e44845c

  • SSDEEP

    768:uEPBn4nZgENWEa5dSG1H+W39/sixLDSHMFQz3v7P/4VYn6n6k2WJkFt1ZYVx1UiY:R6WEudS2+K1sCzkWQrIfxC

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Saveinstance.js
    1⤵
      PID:4668
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3720 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:2080

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads