Analysis
-
max time kernel
137s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29-08-2024 17:07
General
-
Target
a3121b4c92fe3e00075bc74ca045c4939babc726c27b576ee25cb05718ac8541.js
-
Size
3.2MB
-
MD5
b2f47f6b2ac065def4d7e48f27e9a3b5
-
SHA1
dd3b668724cfaf6db55af12b310bedfa8f51625f
-
SHA256
a3121b4c92fe3e00075bc74ca045c4939babc726c27b576ee25cb05718ac8541
-
SHA512
32feacfadc651bfa09cc13822a6e24d48344f8657da4b8ddbbbf3d1644d1c0295d3e11b7bf368cec728bedc095106658018ce594ec113017c54cd0d5d3af99ce
-
SSDEEP
49152:tsubCIS4JSSaMQEdzFfwBMH0aHOpkjFMcCfaqkrpu8656lojq0SboASFpTv+LtNQ:4
Score
10/10
Malware Config
Signatures
-
Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
-
mimikatz is an open source tool to dump credentials on Windows 2 IoCs
-
Command and Scripting Interpreter: JavaScript 1 TTPs
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\a3121b4c92fe3e00075bc74ca045c4939babc726c27b576ee25cb05718ac8541.js1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
2.0MB
-
Filesize
2.4MB
-
Filesize
9.6MB
-
Filesize
4KB
-
Filesize
932KB
-
Filesize
9.6MB
-
Filesize
932KB
-
Filesize
9.6MB
-
Filesize
9.6MB