Overview

overview

7

Static

static

6

eleonorev1...432.js

windows7-x64

3

eleonorev1...432.js

windows10-2004-x64

3

eleonorev1...34.jar

windows7-x64

1

eleonorev1...34.jar

windows10-2004-x64

7

Bol Downloader.dll

windows7-x64

1

Bol Downloader.dll

windows10-2004-x64

1

eleonorev1...ypt.js

windows7-x64

3

eleonorev1...ypt.js

windows10-2004-x64

3

eleonorev1...exp.js

windows7-x64

3

eleonorev1...exp.js

windows10-2004-x64

3

eleonorev1...oip.js

windows7-x64

3

eleonorev1...oip.js

windows10-2004-x64

3

eleonorev1...l.html

windows7-x64

1

eleonorev1...l.html

windows10-2004-x64

1

eleonorev1...df.pdf

windows7-x64

1

eleonorev1...df.pdf

windows10-2004-x64

1

eleonorev1...oc.vbs

windows7-x64

1

eleonorev1...oc.vbs

windows10-2004-x64

1

eleonorev1...tat.js

windows7-x64

3

eleonorev1...tat.js

windows10-2004-x64

3

eleonorev1...per.js

windows7-x64

3

eleonorev1...per.js

windows10-2004-x64

3

eleonorev1...4/x.js

windows7-x64

3

eleonorev1...4/x.js

windows10-2004-x64

3

eleonorev1...bb.jar

windows7-x64

1

eleonorev1...bb.jar

windows10-2004-x64

7

eleonorev1...432.js

windows7-x64

3

eleonorev1...432.js

windows10-2004-x64

3

eleonorev1...9d.jar

windows7-x64

1

eleonorev1...9d.jar

windows10-2004-x64

7

eleonorev1...ypt.js

windows7-x64

3

eleonorev1...ypt.js

windows10-2004-x64

3

Analysis

  • max time kernel
    139s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-05-2024 05:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eleonorev1.4.4 mod/el144/exp.js

  • Size

    30KB

  • MD5

    aea79d4adfd3c487e9318b6085b03933

  • SHA1

    c788ff097a6dfcf14dc5cc5a98a3f65e5b479b0f

  • SHA256

    a7fc8af3f48c7b01a0139ad40890d0dd85ba42c7c8e7e26e02e78e1c3f43c4a8

  • SHA512

    00024eafdd4db3b3045a9b047132f4ccaa80b2dd427e1ca36b32989f69b36f0d6eb7332f2229be7b39e0b06aae0bca159b34a0500d18cac69280afbe11adedc2

  • SSDEEP

    384:egS+dNTFrWVfB+ixubQ9zuL+23GFILX4aO3o/IDQmNVMnY/qfFAaLz:7S4NTFrcR23et5NVMnYuPz

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe "C:\Users\Admin\AppData\Local\Temp\eleonorev1.4.4 mod\el144\exp.js"
    1⤵
      PID:860
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4604,i,16710585221322798697,8586257254049248207,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
      1⤵
        PID:3940

      Network

      MITRE ATT&CK Matrix ATT&CK v13

      Initial Access

      Execution

      Command and Scripting Interpreter

      1
      T1059

      JavaScript

      1
      T1059.007

      Persistence

      Privilege Escalation

      Defense Evasion

      Credential Access

      Discovery

      Lateral Movement

      Collection

      Exfiltration

      Command and Control

      Impact

      Resource Development

      Reconnaissance

      Replay Monitor

      Loading Replay Monitor...

      Downloads