Overview
overview
3Static
static
1rakutentec...yem.js
windows7-x64
3rakutentec...yem.js
windows10-2004-x64
3rakutentec...9vH.js
windows7-x64
3rakutentec...9vH.js
windows10-2004-x64
3rakutentec...Ked.js
windows7-x64
3rakutentec...Ked.js
windows10-2004-x64
3rakutentec...-0v.js
windows7-x64
3rakutentec...-0v.js
windows10-2004-x64
3rakutentec...x.html
windows7-x64
3rakutentec...x.html
windows10-2004-x64
3rakutentec...and.js
windows7-x64
3rakutentec...and.js
windows10-2004-x64
3rakutentec...ocs.js
windows7-x64
3rakutentec...ocs.js
windows10-2004-x64
3rakutentec...pi.ps1
windows7-x64
3rakutentec...pi.ps1
windows10-2004-x64
3rakutentec...th.ps1
windows7-x64
3rakutentec...th.ps1
windows10-2004-x64
3rakutentec...fig.js
windows7-x64
3rakutentec...fig.js
windows10-2004-x64
3rakutentec...ion.js
windows7-x64
3rakutentec...ion.js
windows10-2004-x64
3rakutentec...App.js
windows7-x64
3rakutentec...App.js
windows10-2004-x64
3rakutentec...ngs.js
windows7-x64
3rakutentec...ngs.js
windows10-2004-x64
3rakutentec...fig.js
windows7-x64
3rakutentec...fig.js
windows10-2004-x64
3Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
08/09/2024, 05:47
Static task
static1
Behavioral task
behavioral1
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/_astro/App.HAlkGyem.js
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/_astro/App.HAlkGyem.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/_astro/client.D9Vng9vH.js
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/_astro/client.D9Vng9vH.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/_astro/index.NEDEFKed.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/_astro/index.NEDEFKed.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/_astro/worker-json.D199L-0v.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/_astro/worker-json.D199L-0v.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/index.html
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
rakutentech-laravel-request-docs-5d28e99/resources/dist/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
rakutentech-laravel-request-docs-5d28e99/src/Commands/ExportRequestDocsCommand.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
rakutentech-laravel-request-docs-5d28e99/src/Commands/ExportRequestDocsCommand.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
rakutentech-laravel-request-docs-5d28e99/src/LaravelRequestDocs.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
rakutentech-laravel-request-docs-5d28e99/src/LaravelRequestDocs.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
rakutentech-laravel-request-docs-5d28e99/src/LaravelRequestDocsToOpenApi.ps1
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
rakutentech-laravel-request-docs-5d28e99/src/LaravelRequestDocsToOpenApi.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
rakutentech-laravel-request-docs-5d28e99/src/RoutePath.ps1
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
rakutentech-laravel-request-docs-5d28e99/src/RoutePath.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
rakutentech-laravel-request-docs-5d28e99/ui/postcss.config.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
rakutentech-laravel-request-docs-5d28e99/ui/postcss.config.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
rakutentech-laravel-request-docs-5d28e99/ui/src/components/ApiAction.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
rakutentech-laravel-request-docs-5d28e99/ui/src/components/ApiAction.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
rakutentech-laravel-request-docs-5d28e99/ui/src/components/App.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
rakutentech-laravel-request-docs-5d28e99/ui/src/components/App.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
rakutentech-laravel-request-docs-5d28e99/ui/src/libs/strings.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
rakutentech-laravel-request-docs-5d28e99/ui/src/libs/strings.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
rakutentech-laravel-request-docs-5d28e99/ui/tailwind.config.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
rakutentech-laravel-request-docs-5d28e99/ui/tailwind.config.js
Resource
win10v2004-20240802-en
General
-
Target
rakutentech-laravel-request-docs-5d28e99/src/LaravelRequestDocsToOpenApi.ps1
-
Size
11KB
-
MD5
bc6e44ac1f8b5faaf9853aa9aa7ba7c1
-
SHA1
bf6edacaf76573521809c9626d865b036c4c7134
-
SHA256
9397a09ad3547db90c0b32fa5c9358d7545e69591151727c0f8919f5549a8ccb
-
SHA512
023b3ea5bf16a1de09d4dc01c9d9cec219ecc14ca98261d5e8719c09973390fd2d0710891f4bee9dac6791d330439e3e8ac992fedcfcc93d558741a6bc84cc61
-
SSDEEP
192:Avcm9aeSeGD59zK9Xqa5OPVcUvjz/XgZlbYwyTgqTkSgAqTcCyL:AvcjttjvHoYwyT64
Malware Config
Signatures
-
pid Process 2548 powershell.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2548 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2548 powershell.exe
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\rakutentech-laravel-request-docs-5d28e99\src\LaravelRequestDocsToOpenApi.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2548