Overview
overview
3Static
static
1CGown.com/...t.html
windows7-x64
1CGown.com/...t.html
windows10-2004-x64
1CGown.com/...r.html
windows7-x64
1CGown.com/...r.html
windows10-2004-x64
1CGown.com/...p.html
windows7-x64
1CGown.com/...p.html
windows10-2004-x64
1CGown.com/...g.html
windows7-x64
1CGown.com/...g.html
windows10-2004-x64
1CGown.com/...log.js
windows7-x64
3CGown.com/...log.js
windows10-2004-x64
3CGown.com/...ted.js
windows7-x64
3CGown.com/...ted.js
windows10-2004-x64
3CGown.com/...x.html
windows7-x64
1CGown.com/...x.html
windows10-2004-x64
1CGown.com/...ace.js
windows7-x64
3CGown.com/...ace.js
windows10-2004-x64
3CGown.com/...ain.js
windows7-x64
3CGown.com/...ain.js
windows10-2004-x64
3CGown.com/...esp.js
windows7-x64
3CGown.com/...esp.js
windows10-2004-x64
3CGown.com/...min.js
windows7-x64
3CGown.com/...min.js
windows10-2004-x64
3CGown.com/...ker.js
windows7-x64
3CGown.com/...ker.js
windows10-2004-x64
3CGown.com/...ik.vbs
windows7-x64
1CGown.com/...ik.vbs
windows10-2004-x64
1CGown.com/...DME.js
windows7-x64
3CGown.com/...DME.js
windows10-2004-x64
3CGown.com/...dex.js
windows7-x64
3CGown.com/...dex.js
windows10-2004-x64
3CGown.com/...ted.js
windows7-x64
3CGown.com/...ted.js
windows10-2004-x64
3Analysis
-
max time kernel
141s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28-05-2024 11:01
Static task
static1
Behavioral task
behavioral1
Sample
CGown.com/DynamicShadow 2/custom/about.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
CGown.com/DynamicShadow 2/custom/about.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
CGown.com/DynamicShadow 2/custom/header.html
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
CGown.com/DynamicShadow 2/custom/header.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
CGown.com/DynamicShadow 2/custom/help.html
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
CGown.com/DynamicShadow 2/custom/help.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
CGown.com/DynamicShadow 2/dialog/dialog.html
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
CGown.com/DynamicShadow 2/dialog/dialog.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
CGown.com/DynamicShadow 2/dialog/js/dialog.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
CGown.com/DynamicShadow 2/dialog/js/dialog.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
CGown.com/DynamicShadow 2/dialog/js/dialog.obfuscated.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
CGown.com/DynamicShadow 2/dialog/js/dialog.obfuscated.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
CGown.com/DynamicShadow 2/index.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
CGown.com/DynamicShadow 2/index.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
CGown.com/DynamicShadow 2/lib/AE/CSInterface.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
CGown.com/DynamicShadow 2/lib/AE/CSInterface.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
CGown.com/DynamicShadow 2/lib/js/Main.js
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
CGown.com/DynamicShadow 2/lib/js/Main.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
CGown.com/DynamicShadow 2/lib/js/aesp.js
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
CGown.com/DynamicShadow 2/lib/js/aesp.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
CGown.com/DynamicShadow 2/lib/js/jquery-3.6.0.min.js
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
CGown.com/DynamicShadow 2/lib/js/jquery-3.6.0.min.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
CGown.com/DynamicShadow 2/lib/jsx/colorPicker.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
CGown.com/DynamicShadow 2/lib/jsx/colorPicker.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
CGown.com/DynamicShadow 2/mikritik.vbs
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
CGown.com/DynamicShadow 2/mikritik.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
CGown.com/DynamicShadow 2/node_modules/balanced-match/README.js
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
CGown.com/DynamicShadow 2/node_modules/balanced-match/README.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
CGown.com/DynamicShadow 2/node_modules/balanced-match/index.js
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
CGown.com/DynamicShadow 2/node_modules/balanced-match/index.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
CGown.com/DynamicShadow 2/node_modules/balanced-match/index.obfuscated.js
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
CGown.com/DynamicShadow 2/node_modules/balanced-match/index.obfuscated.js
Resource
win10v2004-20240508-en
General
-
Target
CGown.com/DynamicShadow 2/dialog/js/dialog.js
-
Size
1.9MB
-
MD5
9a02e3a9a2221a6afdea6f653ea4d5ec
-
SHA1
c761c04c2a4a137b12fdc269ef529aac71c21838
-
SHA256
7675ff205d835905ff959c747ced23c7239a2057690e195f59f1df600477ea3d
-
SHA512
fd1aa7c9bd8238ca830076299625357933a1c7dc6663e043fdd7be3b483f0050335b3c1d09cd4815975d60f0fc274a8fb64f3877577df4635dee902a7242c7e2
-
SSDEEP
24576:bxiT4hZvvMp/QkKZ6HnkyTx0cqhDfHF3vwN6/PshWkEPaQtxk4:bxiT4hZvvMp/QknkyTLq1ZTwENV
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe "C:\Users\Admin\AppData\Local\Temp\CGown.com\DynamicShadow 2\dialog\js\dialog.js"1⤵PID:2260
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1412 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:81⤵PID:3188