Overview
overview
3Static
static
1myzone/Album.vbs
windows7-x64
1myzone/Album.vbs
windows10-2004-x64
1myzone/AlbumAdd.vbs
windows7-x64
1myzone/AlbumAdd.vbs
windows10-2004-x64
1myzone/AlbumAll.vbs
windows7-x64
1myzone/AlbumAll.vbs
windows10-2004-x64
1myzone/AlbumDel.vbs
windows7-x64
1myzone/AlbumDel.vbs
windows10-2004-x64
1myzone/AlbumEdit.vbs
windows7-x64
1myzone/AlbumEdit.vbs
windows10-2004-x64
1myzone/AlbumEdit2.vbs
windows7-x64
1myzone/AlbumEdit2.vbs
windows10-2004-x64
1myzone/AlbumMenu.vbs
windows7-x64
1myzone/AlbumMenu.vbs
windows10-2004-x64
1myzone/AlbumOpen.vbs
windows7-x64
1myzone/AlbumOpen.vbs
windows10-2004-x64
1myzone/AlbumSave.vbs
windows7-x64
1myzone/AlbumSave.vbs
windows10-2004-x64
1myzone/Baal.vbs
windows7-x64
1myzone/Baal.vbs
windows10-2004-x64
1myzone/BaalAdd.js
windows7-x64
3myzone/BaalAdd.js
windows10-2004-x64
3myzone/BaalDel.vbs
windows7-x64
1myzone/BaalDel.vbs
windows10-2004-x64
1myzone/BaalEdit.js
windows7-x64
3myzone/BaalEdit.js
windows10-2004-x64
3myzone/BaalEdit2.vbs
windows7-x64
1myzone/BaalEdit2.vbs
windows10-2004-x64
1myzone/BaalSave.vbs
windows7-x64
1myzone/BaalSave.vbs
windows10-2004-x64
1myzone/Blog.js
windows7-x64
3myzone/Blog.js
windows10-2004-x64
3Analysis
-
max time kernel
137s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
17-08-2024 20:23
Static task
static1
Behavioral task
behavioral1
Sample
myzone/Album.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
myzone/Album.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
myzone/AlbumAdd.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
myzone/AlbumAdd.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
myzone/AlbumAll.vbs
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
myzone/AlbumAll.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
myzone/AlbumDel.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
myzone/AlbumDel.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
myzone/AlbumEdit.vbs
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
myzone/AlbumEdit.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
myzone/AlbumEdit2.vbs
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
myzone/AlbumEdit2.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
myzone/AlbumMenu.vbs
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
myzone/AlbumMenu.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
myzone/AlbumOpen.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
myzone/AlbumOpen.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
myzone/AlbumSave.vbs
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
myzone/AlbumSave.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
myzone/Baal.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
myzone/Baal.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
myzone/BaalAdd.js
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
myzone/BaalAdd.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
myzone/BaalDel.vbs
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
myzone/BaalDel.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
myzone/BaalEdit.js
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
myzone/BaalEdit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
myzone/BaalEdit2.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
myzone/BaalEdit2.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
myzone/BaalSave.vbs
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
myzone/BaalSave.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
myzone/Blog.js
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
myzone/Blog.js
Resource
win10v2004-20240802-en
General
-
Target
myzone/BaalEdit.js
-
Size
10KB
-
MD5
4c92ff583729f97969fc5d77a0ce9a23
-
SHA1
00a88dbab9c2b59faebf419b80f58139bd5d590e
-
SHA256
6e4cedbb1276701bf89ac8d9ea5cb73f10df763476d6362bf1600ecef9f8621f
-
SHA512
147d7c55a63b15f6ca54ab379d8aeb98d150791723ba94438cac6bf46b976d1e5e65bba394a033365c5991466571e0532f61be3e784a672db1370ed2fcea64b2
-
SSDEEP
96:CGgcApN3gtYC8Z8HJF9rdiDflbuGj9aVSFIqpVuodXEozO3A/2ZAP2KTpLOo8Zq9:CJjpZQ8Z8HJXdilvx6Iu3Jw4MciP
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\myzone\BaalEdit.js1⤵PID:2340
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4416,i,3239535018877284530,3457823197501312703,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:81⤵PID:3436