Overview
overview
9Static
static
3Wiresharkw...14.exe
windows7-x64
9Wiresharkw...14.exe
windows10-2004-x64
9$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3WinPcap_4_1_3.exe
windows7-x64
7WinPcap_4_1_3.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$SYSDIR/Packet.dll
windows7-x64
3$SYSDIR/Packet.dll
windows10-2004-x64
3$SYSDIR/pthreadVC.dll
windows7-x64
3$SYSDIR/pthreadVC.dll
windows10-2004-x64
3$SYSDIR/wpcap.dll
windows7-x64
3$SYSDIR/wpcap.dll
windows10-2004-x64
3WinPcapInstall.dll
windows7-x64
3WinPcapInstall.dll
windows10-2004-x64
3rpcapd.exe
windows7-x64
1rpcapd.exe
windows10-2004-x64
3WinSparkle.dll
windows7-x64
3WinSparkle.dll
windows10-2004-x64
3Wireshark.exe
windows7-x64
3Wireshark.exe
windows10-2004-x64
3comerr32.dll
windows7-x64
3comerr32.dll
windows10-2004-x64
3console.js
windows7-x64
3console.js
windows10-2004-x64
3dumpcap.exe
windows7-x64
3dumpcap.exe
windows10-2004-x64
3dumpcap.html
windows7-x64
3dumpcap.html
windows10-2004-x64
3Analysis
-
max time kernel
15s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
28-09-2024 18:41
Static task
static1
Behavioral task
behavioral1
Sample
Wiresharkwin321.10.14.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Wiresharkwin321.10.14.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
WinPcap_4_1_3.exe
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
WinPcap_4_1_3.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$SYSDIR/Packet.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$SYSDIR/Packet.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$SYSDIR/pthreadVC.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
$SYSDIR/pthreadVC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$SYSDIR/wpcap.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$SYSDIR/wpcap.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
WinPcapInstall.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
WinPcapInstall.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
rpcapd.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
rpcapd.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
WinSparkle.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
WinSparkle.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Wireshark.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Wireshark.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
comerr32.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
comerr32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
console.js
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
console.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
dumpcap.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
dumpcap.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
dumpcap.html
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
dumpcap.html
Resource
win10v2004-20240802-en
General
-
Target
console.js
-
Size
3KB
-
MD5
58ed366eeda00df609aef46eb7763c36
-
SHA1
579063a72febbc06a7664fe43615523c8d3b282a
-
SHA256
b3824b0bda6058deef9528ec9d87b5ccf9bf01c9c7ff5a61906e30f9081712ac
-
SHA512
eb8513df5498d125da5f220b92fb9a5d08d66c8f05e5930f183827fb7afd7d02a62ef9edcfcf73858efa8c9f6b2112bfbb4dcc18f625f7c0303d559286a5de83
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs