364c3d70f3abb91efb1559952cba473f2563e6593841527c6aadf900f148b85d | Triage

Submit
Reports

Overview

overview

8

Static

static

1

js/535.bundle.js

windows10-ltsc 2021-x64

8

js/75.bundle.js

windows10-ltsc 2021-x64

3

js/968.bundle.js

windows10-ltsc 2021-x64

3

js/bext/pu...der.js

windows10-ltsc 2021-x64

3

js/bext/vp...ola.js

windows10-ltsc 2021-x64

3

js/bext/vp...one.js

windows10-ltsc 2021-x64

3

js/bg.824.bundle.js

windows10-ltsc 2021-x64

3

js/bg.881.bundle.js

windows10-ltsc 2021-x64

3

js/bg.bg.bundle.js

windows10-ltsc 2021-x64

3

js/bg.conf.bundle.js

windows10-ltsc 2021-x64

3

js/bg.html

windows10-ltsc 2021-x64

4

js/bg.vend...dle.js

windows10-ltsc 2021-x64

3

js/conf.bundle.js

windows10-ltsc 2021-x64

3

js/locales.bundle.js

windows10-ltsc 2021-x64

3

js/login_done.html

windows10-ltsc 2021-x64

4

js/mitm.bundle.js

windows10-ltsc 2021-x64

3

js/mitm.html

windows10-ltsc 2021-x64

4

js/popup.html

windows10-ltsc 2021-x64

4

js/ui.bundle.js

windows10-ltsc 2021-x64

3

js/vendors.bundle.js

windows10-ltsc 2021-x64

3

Analysis

max time kernel
1373s
max time network
1433s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241023-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
08-11-2024 09:05

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

js/535.bundle.js

Resource

win10ltsc2021-20241023-en

adware discovery evasion execution persistence phishing privilege_escalation stealer trojan

windows10-ltsc 2021-x64

40 signatures

1800 seconds

Behavioral task

behavioral2

Sample

js/75.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral3

Sample

js/968.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral4

Sample

js/bext/pub/pre_loader.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral5

Sample

js/bext/vpn/bg/cs_hola.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral6

Sample

js/bext/vpn/ui/login_done.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral7

Sample

js/bg.824.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral8

Sample

js/bg.881.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral9

Sample

js/bg.bg.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral10

Sample

js/bg.conf.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral11

Sample

js/bg.html

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

10 signatures

1800 seconds

Behavioral task

behavioral12

Sample

js/bg.vendors.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral13

Sample

js/conf.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral14

Sample

js/locales.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral15

Sample

js/login_done.html

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

10 signatures

1800 seconds

Behavioral task

behavioral16

Sample

js/mitm.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral17

Sample

js/mitm.html

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

10 signatures

1800 seconds

Behavioral task

behavioral18

Sample

js/popup.html

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

10 signatures

1800 seconds

Behavioral task

behavioral19

Sample

js/ui.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Behavioral task

behavioral20

Sample

js/vendors.bundle.js

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

1 signatures

1800 seconds

Report Analysis Logs

General

Target

js/bg.vendors.bundle.js
Size

137KB
MD5

c2287b4e31867d3bf54ec4c2e29e47ed
SHA1

db03fb12e7d43acb21f236655150fb7306f80f2a
SHA256

cb39cbb7169b420d0ee163ee16231506c3d61afbe5ddfa1710b9592cebed6ef6
SHA512

54aea0906507c405053e7d996459f66563eebcab092edac1ab46d9c096466caaad3965b8ec66363655387c8d4649e25846c1829df5b39358a6ae82b7e25f7698
SSDEEP

1536:Que+aRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKs0:WzHNwcv9VBQpLl88SMBQ47GKItcnX

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\js\bg.vendors.bundle.js
1⤵
PID:3336

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy