Overview
overview
3Static
static
1114/Extens...tor.js
windows7-x64
3114/Extens...tor.js
windows10-2004-x64
3114/Extens...t.html
windows7-x64
1114/Extens...t.html
windows10-2004-x64
1114/Extens...h.html
windows7-x64
1114/Extens...h.html
windows10-2004-x64
1114/Extens...e.html
windows7-x64
1114/Extens...e.html
windows10-2004-x64
1114/Extens...k.html
windows7-x64
1114/Extens...k.html
windows10-2004-x64
1114/Extens...a.html
windows7-x64
1114/Extens...a.html
windows10-2004-x64
1114/Extens...e.html
windows7-x64
1114/Extens...e.html
windows10-2004-x64
1114/Extens...e.html
windows7-x64
1114/Extens...e.html
windows10-2004-x64
1114/Extens...e.html
windows7-x64
1114/Extens...e.html
windows10-2004-x64
1114/Extens...e.html
windows7-x64
1114/Extens...e.html
windows10-2004-x64
1114/Extens...ory.js
windows7-x64
3114/Extens...ory.js
windows10-2004-x64
3114/Extens...ist.js
windows7-x64
3114/Extens...ist.js
windows10-2004-x64
3114/Extens...st.vbs
windows7-x64
1114/Extens...st.vbs
windows10-2004-x64
1114/Extens...th.ps1
windows7-x64
3114/Extens...th.ps1
windows10-2004-x64
3114/Extens...em.vbs
windows7-x64
1114/Extens...em.vbs
windows10-2004-x64
1114/Extens...st.vbs
windows7-x64
1114/Extens...st.vbs
windows10-2004-x64
1Analysis
-
max time kernel
129s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25/06/2024, 16:48
Static task
static1
Behavioral task
behavioral1
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/kindeditor.js
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/kindeditor.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/about.html
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/about.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/flash.html
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/flash.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/image.html
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/image.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/link.html
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/link.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/media.html
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/media.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/plainpaste.html
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/plainpaste.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/remote_image.html
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/remote_image.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/wordpaste.html
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/wordpaste.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Skin/UITemplate/template.Ext_JCAdvComponent_UICtrl_Date.html
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
114/Extension/Ext_JCAdvComponent/0.1.1.0/Skin/UITemplate/template.Ext_JCAdvComponent_UICtrl_Date.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Category/class.Ext_JCCMS_AdminCategory.js
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Category/class.Ext_JCCMS_AdminCategory.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Category/class.Ext_JCCMS_AdminCategoryList.js
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Category/class.Ext_JCCMS_AdminCategoryList.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Item/class.Ext_JCCMS_AdminItemList.vbs
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Item/class.Ext_JCCMS_AdminItemList.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Item/class.Ext_JCCMS_CategoryPath.ps1
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Item/class.Ext_JCCMS_CategoryPath.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Item/class.Ext_JCCMS_DisplayItem.vbs
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Item/class.Ext_JCCMS_DisplayItem.vbs
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Item/class.Ext_JCCMS_DisplayItemList.vbs
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
114/Extension/Ext_JCCMS/0.1.1.0/Classes/Item/class.Ext_JCCMS_DisplayItemList.vbs
Resource
win10v2004-20240611-en
General
-
Target
114/Extension/Ext_JCAdvComponent/0.1.1.0/Lib/plugins/plainpaste.html
-
Size
773B
-
MD5
d69c76f3ba8734795415ccde66f7fb5f
-
SHA1
f0a2f54043738dae7a64b8b75b44de9cd26c764f
-
SHA256
b9fdfb1686668b4e8ed9179d0455f72d8e53a1389dd996ce24d3d976b109f598
-
SHA512
876dd79b4e566b65697d054d873eff545fab5344e2c0c39bef2b11deb9e19a05f2f45da3d338b585eb4e01b65fcefa328c2e6a7731b893945c03961354d1f5d0
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\114\Extension\Ext_JCAdvComponent\0.1.1.0\Lib\plugins\plainpaste.html1⤵PID:2808
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=4792,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=3932 /prefetch:11⤵PID:2196
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=4984,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:11⤵PID:3268
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5340,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:11⤵PID:4488
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5500,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:81⤵PID:4060
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5524,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:81⤵PID:2432
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=5884,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:11⤵PID:4920
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --field-trial-handle=5860,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:81⤵PID:556
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5536,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:81⤵PID:4516