Analysis

  • max time kernel
    1740s
  • max time network
    1163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/05/2024, 12:03

General

  • Target
    Scan_skmbt050012.js
  • Size 18.1MB
  • Sample240518-n8d8saaf57
  • SHA256 7cf268d7ff6749ad18a09f5a050f1417376eb6eca7d86bff9d6dfedb1bea3335
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Command and Scripting Interpreter: JavaScript 1 TTPs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Scan_skmbt050012.js
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1452

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1452-1-0x00007FF89CAE3000-0x00007FF89CAE5000-memory.dmp

        memory/1452-2-0x00007FF89CAE0000-0x00007FF89D5A1000-memory.dmp

        memory/1452-3-0x000001A9EC740000-0x000001A9EC8BE000-memory.dmp

        memory/1452-4-0x000001A9F46B0000-0x000001A9F4BD8000-memory.dmp

        memory/1452-5-0x000001A9EDE60000-0x000001A9EE068000-memory.dmp

        memory/1452-6-0x000001A9EC210000-0x000001A9EC2D4000-memory.dmp

        memory/1452-21-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-30-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-70-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-68-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-66-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-64-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-62-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-60-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-58-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-54-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-52-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-50-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-48-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-46-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-44-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-42-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-40-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-38-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-36-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-34-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-29-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-26-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-24-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-22-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-18-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-16-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-14-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-12-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-56-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-8-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-32-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-7-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-10-0x000001A9EC210000-0x000001A9EC2D1000-memory.dmp

        memory/1452-721-0x00007FF89CAE0000-0x00007FF89D5A1000-memory.dmp

        memory/1452-723-0x00007FF89CAE0000-0x00007FF89D5A1000-memory.dmp