Overview
overview
3Static
static
1HMRC 2018/...ime.js
windows7-x64
3HMRC 2018/...ime.js
windows10-2004-x64
3HMRC 2018/...ime.js
windows7-x64
3HMRC 2018/...ime.js
windows10-2004-x64
3HMRC 2018/...kup.js
windows7-x64
3HMRC 2018/...kup.js
windows10-2004-x64
3HMRC 2018/...enc.js
windows7-x64
3HMRC 2018/...enc.js
windows10-2004-x64
3HMRC 2018/...om.ps1
windows7-x64
3HMRC 2018/...om.ps1
windows10-2004-x64
3HMRC 2018/...eck.js
windows7-x64
3HMRC 2018/...eck.js
windows10-2004-x64
3HMRC 2018/...o.html
windows7-x64
1HMRC 2018/...o.html
windows10-2004-x64
1HMRC 2018/...l.html
windows7-x64
1HMRC 2018/...l.html
windows10-2004-x64
1HMRC 2018/...e.html
windows7-x64
1HMRC 2018/...e.html
windows10-2004-x64
1HMRC 2018/...t.html
windows7-x64
1HMRC 2018/...t.html
windows10-2004-x64
1HMRC 2018/...sh.ps1
windows7-x64
3HMRC 2018/...sh.ps1
windows10-2004-x64
3HMRC 2018/...nk2.js
windows7-x64
3HMRC 2018/...nk2.js
windows10-2004-x64
3HMRC 2018/...ify.js
windows7-x64
3HMRC 2018/...ify.js
windows10-2004-x64
3HMRC 2018/...fy2.js
windows7-x64
3HMRC 2018/...fy2.js
windows10-2004-x64
3HMRC 2018/...001.js
windows7-x64
3HMRC 2018/...001.js
windows10-2004-x64
3HMRC 2018/...002.js
windows7-x64
3HMRC 2018/...002.js
windows10-2004-x64
3Analysis
-
max time kernel
131s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
01-06-2024 17:07
Static task
static1
Behavioral task
behavioral1
Sample
HMRC 2018/banks/assets/includes/Bank_One_Time.js
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
HMRC 2018/banks/assets/includes/Bank_One_Time.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
HMRC 2018/banks/assets/includes/One_Time.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
HMRC 2018/banks/assets/includes/One_Time.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
HMRC 2018/banks/assets/includes/blacklist_lookup.js
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
HMRC 2018/banks/assets/includes/blacklist_lookup.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
HMRC 2018/banks/assets/includes/enc.js
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
HMRC 2018/banks/assets/includes/enc.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
HMRC 2018/banks/assets/includes/simplehtmldom.ps1
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
HMRC 2018/banks/assets/includes/simplehtmldom.ps1
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
HMRC 2018/banks/assets/js/cardcheck.js
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
HMRC 2018/banks/assets/js/cardcheck.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
HMRC 2018/banks/assets/refund-help-files/acno.html
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
HMRC 2018/banks/assets/refund-help-files/acno.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
HMRC 2018/banks/assets/refund-help-files/dl.html
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
HMRC 2018/banks/assets/refund-help-files/dl.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
HMRC 2018/banks/assets/refund-help-files/secode.html
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
HMRC 2018/banks/assets/refund-help-files/secode.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
HMRC 2018/banks/assets/refund-help-files/sort.html
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
HMRC 2018/banks/assets/refund-help-files/sort.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
HMRC 2018/banks/bank.barclays.co.uk/Finish.ps1
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
HMRC 2018/banks/bank.barclays.co.uk/Finish.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
HMRC 2018/banks/bank.barclays.co.uk/Loginlink2.js
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
HMRC 2018/banks/bank.barclays.co.uk/Loginlink2.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
HMRC 2018/banks/bank.barclays.co.uk/Verify.js
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
HMRC 2018/banks/bank.barclays.co.uk/Verify.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
HMRC 2018/banks/bank.barclays.co.uk/Verify2.js
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
HMRC 2018/banks/bank.barclays.co.uk/Verify2.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
HMRC 2018/banks/bank.barclays.co.uk/assets/help/js/001.js
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
HMRC 2018/banks/bank.barclays.co.uk/assets/help/js/001.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
HMRC 2018/banks/bank.barclays.co.uk/assets/help/js/002.js
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
HMRC 2018/banks/bank.barclays.co.uk/assets/help/js/002.js
Resource
win10v2004-20240226-en
General
-
Target
HMRC 2018/banks/assets/refund-help-files/secode.html
-
Size
2KB
-
MD5
e2ecc09f096f5cb39084eeb0890e6a06
-
SHA1
b16543c071d6617e840cc1cf10b4b8fb18169d6e
-
SHA256
065dbb90833dfd4861e76445dec4f94b45d18e005e162f5499a27846407d4b8c
-
SHA512
aac97faaf1cee8f366cce0d19975c92cb8afb006fd1cf695f1ae7d2557e849886a2860e24a912495e27d47b028f43ccc9eeac881461b8d15325d8a07bbe48c71
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\HMRC 2018\banks\assets\refund-help-files\secode.html1⤵PID:216
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=2212 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:11⤵PID:1172
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=3708 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:11⤵PID:2204
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5400 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:81⤵PID:4912
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5272 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:11⤵PID:3968
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5384 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:81⤵PID:2252