Overview
overview
3Static
static
1TorrentMon...ss.ps1
windows7-x64
3TorrentMon...ss.ps1
windows10-2004-x64
3TorrentMon...ss.ps1
windows7-x64
3TorrentMon...ss.ps1
windows10-2004-x64
3TorrentMon...ass.js
windows7-x64
3TorrentMon...ass.js
windows10-2004-x64
3TorrentMon...ss.ps1
windows7-x64
3TorrentMon...ss.ps1
windows10-2004-x64
3TorrentMon...ss.ps1
windows7-x64
3TorrentMon...ss.ps1
windows10-2004-x64
3TorrentMon...add.js
windows7-x64
3TorrentMon...add.js
windows10-2004-x64
3TorrentMon...als.js
windows7-x64
3TorrentMon...als.js
windows10-2004-x64
3TorrentMon...orm.js
windows7-x64
3TorrentMon...orm.js
windows10-2004-x64
3TorrentMon...ngs.js
windows7-x64
3TorrentMon...ngs.js
windows10-2004-x64
3TorrentMon...le.ps1
windows7-x64
3TorrentMon...le.ps1
windows10-2004-x64
3TorrentMon...ing.js
windows7-x64
3TorrentMon...ing.js
windows10-2004-x64
3TorrentMon...min.js
windows7-x64
3TorrentMon...min.js
windows10-2004-x64
3TorrentMon...min.js
windows7-x64
3TorrentMon...min.js
windows10-2004-x64
3TorrentMon...min.js
windows7-x64
3TorrentMon...min.js
windows10-2004-x64
3TorrentMon...nap.js
windows7-x64
3TorrentMon...nap.js
windows10-2004-x64
3TorrentMon...unc.js
windows7-x64
3TorrentMon...unc.js
windows10-2004-x64
3Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
17-09-2024 08:55
Static task
static1
Behavioral task
behavioral1
Sample
TorrentMonitor-master/class/Database.class.ps1
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
TorrentMonitor-master/class/Database.class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
TorrentMonitor-master/class/System.class.ps1
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
TorrentMonitor-master/class/System.class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
TorrentMonitor-master/class/Transmission.class.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
TorrentMonitor-master/class/Transmission.class.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
TorrentMonitor-master/class/TransmissionRPC.class.ps1
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
TorrentMonitor-master/class/TransmissionRPC.class.ps1
Resource
win10v2004-20240910-en
Behavioral task
behavioral9
Sample
TorrentMonitor-master/class/Update.class.ps1
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
TorrentMonitor-master/class/Update.class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
TorrentMonitor-master/include/add.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
TorrentMonitor-master/include/add.js
Resource
win10v2004-20240910-en
Behavioral task
behavioral13
Sample
TorrentMonitor-master/include/credentials.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
TorrentMonitor-master/include/credentials.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
TorrentMonitor-master/include/form.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
TorrentMonitor-master/include/form.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
TorrentMonitor-master/include/settings.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
TorrentMonitor-master/include/settings.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
TorrentMonitor-master/include/show_table.ps1
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
TorrentMonitor-master/include/show_table.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
TorrentMonitor-master/include/show_watching.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
TorrentMonitor-master/include/show_watching.js
Resource
win10v2004-20240910-en
Behavioral task
behavioral23
Sample
TorrentMonitor-master/js/html5shiv.min.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
TorrentMonitor-master/js/html5shiv.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
TorrentMonitor-master/js/jquery-ui.min.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
TorrentMonitor-master/js/jquery-ui.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
TorrentMonitor-master/js/jquery.min.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
TorrentMonitor-master/js/jquery.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
TorrentMonitor-master/js/ohsnap.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
TorrentMonitor-master/js/ohsnap.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
TorrentMonitor-master/js/user-func.js
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
TorrentMonitor-master/js/user-func.js
Resource
win10v2004-20240802-en
General
-
Target
TorrentMonitor-master/include/show_table.ps1
-
Size
7KB
-
MD5
d5ca12ebe31356f44a56216c2590dc6b
-
SHA1
91553dfa4f1c155dc1354c54293244a67e04a17d
-
SHA256
0a7e0501035e4e9ecefab162853f2e41f7e7b14fea24f783d5085fb78bf3e60b
-
SHA512
5c67e25276dbaa6cd5493d60566eef69a9a252932794f1bc07e3b593b95911cc50aa182531947994c249f9d71c414e2e9fc5a3bf63dbe1a16906dd423612e914
-
SSDEEP
96:zc0+lCPKe0dAYdy2ereBVCQas6UBnXmx6IBOvBFanndUeiQOm9jpM8aP3iwL9Tn4:QCxiEe/CBVFgDEKeiQOCtM8aP3iMt4
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
powershell.exepid process 2732 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
powershell.exedescription pid process Token: SeDebugPrivilege 2732 powershell.exe
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\TorrentMonitor-master\include\show_table.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2732-4-0x000007FEF5FBE000-0x000007FEF5FBF000-memory.dmpFilesize
4KB
-
memory/2732-5-0x000000001B510000-0x000000001B7F2000-memory.dmpFilesize
2.9MB
-
memory/2732-7-0x000007FEF5D00000-0x000007FEF669D000-memory.dmpFilesize
9.6MB
-
memory/2732-9-0x000007FEF5D00000-0x000007FEF669D000-memory.dmpFilesize
9.6MB
-
memory/2732-8-0x000007FEF5D00000-0x000007FEF669D000-memory.dmpFilesize
9.6MB
-
memory/2732-6-0x0000000002870000-0x0000000002878000-memory.dmpFilesize
32KB
-
memory/2732-10-0x000007FEF5D00000-0x000007FEF669D000-memory.dmpFilesize
9.6MB
-
memory/2732-11-0x000007FEF5D00000-0x000007FEF669D000-memory.dmpFilesize
9.6MB