Analysis
-
max time kernel
91s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02-08-2024 20:19
General
-
Target
JJS-UI/resources/app.asar/node_modules/request/package.json
-
Size
1KB
-
MD5
201c3897312437fb33dd59062f890007
-
SHA1
fbdd6982dd6d6715de1ecd1dd2b8ec1ce7a9538c
-
SHA256
c08b406a2261e91eef7201e92acc3e5c9246cb3ae00cabe8d12e0bc00ea1c307
-
SHA512
46dd8bd962796796501d61212dc702489774f08d612691227893ed0e3a96e40c99b9a26793f3bbcd2faac660a99c9936768c36ce75b077478447bd1ad0b62435
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\JJS-UI\resources\app.asar\node_modules\request\package.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx