Analysis Overview
SHA256
d72f9698b167953faba47d00d817412c212e39d2aca60dff25ec01e98f6081ea
Threat Level: Likely benign
The file livebot-win32-x64.zip was found to be: Likely benign.
Malicious Activity Summary
Command and Scripting Interpreter: JavaScript
Browser Information Discovery
Unsigned PE
Suspicious use of WriteProcessMemory
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Enumerates system info in registry
Suspicious behavior: EnumeratesProcesses
Suspicious use of SendNotifyMessage
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-11-13 09:30
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Analysis: behavioral23
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20241010-en
Max time kernel
120s
Max time network
129s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\util\dist\index.js
Network
Files
Analysis: behavioral25
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240903-en
Max time kernel
121s
Max time network
128s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\util\dist\index.js
Network
Files
Analysis: behavioral11
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240903-en
Max time kernel
119s
Max time network
126s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\formatters\dist\index.js
Network
Files
Analysis: behavioral17
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:35
Platform
win7-20241010-en
Max time kernel
122s
Max time network
142s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\dist\index.js
Network
Files
Analysis: behavioral16
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
144s
Max time network
154s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 67.209.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 2.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 97.17.167.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.163.202.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 69.209.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 90.16.208.104.in-addr.arpa | udp |
Files
Analysis: behavioral18
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
140s
Max time network
155s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 58.55.71.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 68.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 104.219.191.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 197.87.175.4.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.227.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 88.210.23.2.in-addr.arpa | udp |
Files
Analysis: behavioral21
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240903-en
Max time kernel
121s
Max time network
134s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\dist\index.mjs.js
Network
Files
Analysis: behavioral24
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
88s
Max time network
155s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\util\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 66.209.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 71.31.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 58.55.71.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 104.219.191.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.163.202.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 88.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 31.243.111.52.in-addr.arpa | udp |
Files
Analysis: behavioral5
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240903-en
Max time kernel
121s
Max time network
128s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\collection\dist\index.js
Network
Files
Analysis: behavioral7
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240729-en
Max time kernel
10s
Max time network
17s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\collection\dist\index.js
Network
Files
Analysis: behavioral9
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240903-en
Max time kernel
121s
Max time network
128s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\formatters\dist\index.js
Network
Files
Analysis: behavioral10
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
143s
Max time network
160s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\formatters\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 58.55.71.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 73.208.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 73.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.163.202.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 88.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.227.111.52.in-addr.arpa | udp |
Files
Analysis: behavioral20
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
145s
Max time network
155s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 88.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 0.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 58.55.71.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 53.210.109.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.214.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.227.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 30.73.42.20.in-addr.arpa | udp |
Files
Analysis: behavioral2
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
146s
Max time network
155s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\builders\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 104.219.191.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 101.209.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 71.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 58.55.71.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 212.20.149.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.163.202.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 27.73.42.20.in-addr.arpa | udp |
Files
Analysis: behavioral3
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240708-en
Max time kernel
120s
Max time network
129s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\builders\dist\index.js
Network
Files
Analysis: behavioral30
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
144s
Max time network
154s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@electron\get\dist\cjs\Downloader.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 104.219.191.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.163.202.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.31.95.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 66.209.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.179.89.13.in-addr.arpa | udp |
Files
Analysis: behavioral12
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
87s
Max time network
154s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\formatters\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 0.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 53.210.109.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
Files
Analysis: behavioral14
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
145s
Max time network
157s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\README.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 69.31.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 228.249.119.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 212.20.149.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 56.163.245.4.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.214.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 29.243.111.52.in-addr.arpa | udp |
Files
Analysis: behavioral27
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240903-en
Max time kernel
117s
Max time network
124s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@electron\get\dist\cjs\Cache.js
Network
Files
Analysis: behavioral28
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
145s
Max time network
155s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@electron\get\dist\cjs\Cache.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 68.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 50.23.12.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.236.111.52.in-addr.arpa | udp |
Files
Analysis: behavioral32
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
141s
Max time network
157s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@electron\get\dist\cjs\GotDownloader.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 64.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.163.202.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.31.95.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 136.71.105.51.in-addr.arpa | udp |
Files
Analysis: behavioral4
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
142s
Max time network
155s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\builders\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 58.55.71.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.214.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.163.202.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 40.173.79.40.in-addr.arpa | udp |
Files
Analysis: behavioral6
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
88s
Max time network
155s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\collection\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 104.219.191.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 2.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 228.249.119.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 50.23.12.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 71.208.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.227.111.52.in-addr.arpa | udp |
Files
Analysis: behavioral15
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240903-en
Max time kernel
121s
Max time network
128s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\dist\index.js
Network
Files
Analysis: behavioral26
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
146s
Max time network
154s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\util\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 104.219.191.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 67.31.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 228.249.119.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 212.20.149.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 53.210.109.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.227.111.52.in-addr.arpa | udp |
Files
Analysis: behavioral8
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
138s
Max time network
153s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\collection\dist\index.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 67.209.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 209.205.72.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | udp | |
| US | 8.8.8.8:53 | 50.23.12.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 99.209.201.84.in-addr.arpa | udp |
Files
Analysis: behavioral13
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240708-en
Max time kernel
118s
Max time network
125s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\README.js
Network
Files
Analysis: behavioral22
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win10v2004-20241007-en
Max time kernel
143s
Max time network
159s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\dist\index.mjs.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 228.249.119.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 88.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 104.219.191.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.163.202.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
Files
Analysis: behavioral29
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:35
Platform
win7-20241010-en
Max time kernel
7s
Max time network
20s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@electron\get\dist\cjs\Downloader.js
Network
Files
Analysis: behavioral1
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240903-en
Max time kernel
40s
Max time network
150s
Command Line
Signatures
Browser Information Discovery
Command and Scripting Interpreter: JavaScript
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\builders\dist\index.js
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7709758,0x7fef7709768,0x7fef7709778
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1128 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1504 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1588 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2324 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2332 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1444 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1300 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1308 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3592 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4064 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4068 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3880 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3800 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4160 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3804 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4172 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3912 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4308 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4464 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4580 --field-trial-handle=1288,i,10269202749275099934,3885362376233737228,131072 /prefetch:8
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 142.250.187.196:443 | www.google.com | tcp |
| US | 8.8.8.8:53 | ogads-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | apis.google.com | udp |
| GB | 142.250.187.202:443 | ogads-pa.googleapis.com | tcp |
| GB | 216.58.213.14:443 | apis.google.com | tcp |
| GB | 142.250.187.202:443 | ogads-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| GB | 142.250.200.46:443 | play.google.com | tcp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | speedtest.net | udp |
| US | 151.101.66.219:443 | speedtest.net | tcp |
| US | 151.101.66.219:443 | speedtest.net | tcp |
| US | 151.101.66.219:80 | speedtest.net | tcp |
| US | 151.101.66.219:80 | speedtest.net | tcp |
| US | 8.8.8.8:53 | www.speedtest.net | udp |
| US | 104.17.147.22:443 | www.speedtest.net | tcp |
| US | 8.8.8.8:53 | cdn.ziffstatic.com | udp |
| US | 8.8.8.8:53 | b.cdnst.net | udp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| GB | 88.221.120.203:443 | cdn.ziffstatic.com | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 8.8.8.8:53 | b-code.liadm.com | udp |
| US | 8.8.8.8:53 | btloader.com | udp |
| US | 8.8.8.8:53 | diffuser-cdn.app-us1.com | udp |
| FR | 13.32.145.100:443 | b-code.liadm.com | tcp |
| US | 104.18.128.216:443 | diffuser-cdn.app-us1.com | tcp |
| US | 104.22.74.216:443 | btloader.com | tcp |
| GB | 88.221.120.203:443 | cdn.ziffstatic.com | udp |
| US | 8.8.8.8:53 | crt.rootg2.amazontrust.com | udp |
| FR | 3.164.163.59:80 | crt.rootg2.amazontrust.com | tcp |
| US | 8.8.8.8:53 | api.btloader.com | udp |
| US | 130.211.23.194:443 | api.btloader.com | tcp |
| US | 130.211.23.194:443 | api.btloader.com | tcp |
| US | 8.8.8.8:53 | ad-delivery.net | udp |
| US | 8.8.8.8:53 | cdn.cookielaw.org | udp |
| US | 104.26.2.70:443 | ad-delivery.net | tcp |
| US | 104.26.2.70:443 | ad-delivery.net | tcp |
| US | 8.8.8.8:53 | prism.app-us1.com | udp |
| US | 8.8.8.8:53 | cdn.static.zdbb.net | udp |
| US | 104.18.87.42:443 | cdn.cookielaw.org | tcp |
| GB | 2.22.249.148:443 | cdn.static.zdbb.net | tcp |
| US | 104.18.128.216:443 | prism.app-us1.com | tcp |
| US | 8.8.8.8:53 | geolocation.onetrust.com | udp |
| US | 172.64.155.119:443 | geolocation.onetrust.com | tcp |
| US | 8.8.8.8:53 | zdbb.net | udp |
| US | 8.8.8.8:53 | gurgle.speedtest.net | udp |
| US | 130.211.23.194:443 | api.btloader.com | udp |
| US | 44.219.137.9:443 | gurgle.speedtest.net | tcp |
| IE | 52.30.78.242:443 | zdbb.net | tcp |
| US | 8.8.8.8:53 | trackcmp.net | udp |
| US | 104.18.34.214:443 | trackcmp.net | tcp |
| US | 104.18.87.42:443 | cdn.cookielaw.org | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 8.8.8.8:53 | gurgle.zdbb.net | udp |
| US | 44.219.137.9:443 | gurgle.zdbb.net | tcp |
| US | 8.8.8.8:53 | i.liadm.com | udp |
| US | 34.199.244.9:443 | i.liadm.com | tcp |
| US | 8.8.8.8:53 | rp.liadm.com | udp |
| US | 34.199.9.116:443 | rp.liadm.com | tcp |
| US | 8.8.8.8:53 | privacyportal.onetrust.com | udp |
| US | 104.18.32.137:443 | privacyportal.onetrust.com | tcp |
| US | 8.8.8.8:53 | secure-us.imrworldwide.com | udp |
| IE | 99.80.241.215:443 | secure-us.imrworldwide.com | tcp |
| US | 8.8.8.8:53 | jogger.zdbb.net | udp |
| US | 8.8.8.8:53 | tags.bkrtx.com | udp |
| US | 8.8.8.8:53 | idsync.rlcdn.com | udp |
| US | 52.87.93.211:443 | jogger.zdbb.net | tcp |
| GB | 104.78.165.146:443 | tags.bkrtx.com | tcp |
| US | 35.244.174.68:443 | idsync.rlcdn.com | tcp |
| US | 8.8.8.8:53 | live.rezync.com | udp |
| US | 8.8.8.8:53 | d.turn.com | udp |
| US | 8.8.8.8:53 | match.adsrvr.org | udp |
| US | 8.8.8.8:53 | mid.rkdms.com | udp |
| US | 8.8.8.8:53 | dis.criteo.com | udp |
| US | 8.8.8.8:53 | ib.adnxs.com | udp |
| US | 8.8.8.8:53 | dpm.demdex.net | udp |
| US | 3.165.148.118:443 | live.rezync.com | tcp |
| US | 52.223.40.198:443 | match.adsrvr.org | tcp |
| NL | 46.228.164.13:443 | d.turn.com | tcp |
| NL | 178.250.1.9:443 | dis.criteo.com | tcp |
| IE | 34.250.142.67:443 | dpm.demdex.net | tcp |
| US | 44.196.229.184:443 | mid.rkdms.com | tcp |
| DE | 37.252.171.53:443 | ib.adnxs.com | tcp |
| US | 8.8.8.8:53 | region1.analytics.google.com | udp |
| US | 8.8.8.8:53 | stats.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | www.google.co.uk | udp |
| GB | 142.250.187.227:443 | www.google.co.uk | tcp |
| US | 216.239.32.36:443 | region1.analytics.google.com | tcp |
| BE | 142.250.110.154:443 | stats.g.doubleclick.net | tcp |
| US | 8.8.8.8:53 | p.rfihub.com | udp |
| NL | 193.0.160.131:443 | p.rfihub.com | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| IE | 99.80.241.215:443 | secure-us.imrworldwide.com | tcp |
| US | 8.8.8.8:53 | thrtle.com | udp |
| US | 8.8.8.8:53 | sync.mathtag.com | udp |
| US | 8.8.8.8:53 | x.bidswitch.net | udp |
| US | 8.8.8.8:53 | px.ads.linkedin.com | udp |
| US | 8.8.8.8:53 | pixel-sync.sitescout.com | udp |
| US | 8.8.8.8:53 | b1sync.zemanta.com | udp |
| US | 3.93.134.245:443 | thrtle.com | tcp |
| US | 216.200.232.253:443 | sync.mathtag.com | tcp |
| US | 34.36.216.150:443 | pixel-sync.sitescout.com | tcp |
| US | 13.107.42.14:443 | px.ads.linkedin.com | tcp |
| US | 50.31.142.191:443 | b1sync.zemanta.com | tcp |
| NL | 35.214.136.108:443 | x.bidswitch.net | tcp |
| NL | 35.214.136.108:443 | x.bidswitch.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 151.101.194.219:443 | b.cdnst.net | tcp |
| US | 8.8.8.8:53 | region1.google-analytics.com | udp |
| GB | 142.250.187.196:443 | www.google.com | udp |
| GB | 142.250.200.46:443 | play.google.com | udp |
Files
\??\pipe\crashpad_2540_GFKSBQTZGZAWXJDK
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp
| MD5 | 18e723571b00fb1694a3bad6c78e4054 |
| SHA1 | afcc0ef32d46fe59e0483f9a3c891d3034d12f32 |
| SHA256 | 8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa |
| SHA512 | 43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
| MD5 | f50f89a0a91564d0b8a211f8921aa7de |
| SHA1 | 112403a17dd69d5b9018b8cede023cb3b54eab7d |
| SHA256 | b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec |
| SHA512 | bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp
| MD5 | aefd77f47fb84fae5ea194496b44c67a |
| SHA1 | dcfbb6a5b8d05662c4858664f81693bb7f803b82 |
| SHA256 | 4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611 |
| SHA512 | b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3 |
C:\Users\Admin\AppData\Local\Temp\Cab14DA.tmp
| MD5 | 49aebf8cbd62d92ac215b2923fb1b9f5 |
| SHA1 | 1723be06719828dda65ad804298d0431f6aff976 |
| SHA256 | b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f |
| SHA512 | bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b |
C:\Users\Admin\AppData\Local\Temp\Tar14FC.tmp
| MD5 | 4ea6026cf93ec6338144661bf1202cd1 |
| SHA1 | a1dec9044f750ad887935a01430bf49322fbdcb7 |
| SHA256 | 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8 |
| SHA512 | 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | ea08422d1fd735a7fbf218f1a77c4c5a |
| SHA1 | 03f6c64cc98d3bdb28c11841110b12c15c500fb3 |
| SHA256 | 4128b804200f4e2f0a7e96c965274a9de3b2e96701f6f09165b8256626368cac |
| SHA512 | 53d037b4b2d631222767c3a1520cbdc923a6c109ecd23a7cc9b419ccb2930756659e4033d898c985647d2c78687902e68e0d8edd2dddb90bd9bba0d4e2718f65 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 1229ee552c60da2144e3085c3b1eb4f5 |
| SHA1 | 38e2891d4a7e45839ccff7eb81e67a73f41ff401 |
| SHA256 | 6cef780e8c8db29944ff15935039be44b244948ece4b1120a583bf0cc0738068 |
| SHA512 | 3b17e1d3d1dc5c4d9414d6c75877e86599a75e775cd91a01bf3662fda69c04e2d76603b9f18437790628c96a014ae468a8f7424b926e6b26988fb7a15c9a479a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 91b7529735f0f73708a6bd3aa0e5c08c |
| SHA1 | 0835a3b05e3f987f8c8dcb1da137e957eb986d3d |
| SHA256 | f336a247b6b3e8996698d33e9a9d79528e94212f10b5775bcc26176c888a8a8b |
| SHA512 | 718b357e958e8a89f04a53c055a992117470d1782b90dd84d94b2387428c2d41f9da4eddc710a342972169de703f362a876ce7c307b75ecf53ad9c8eff344447 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 2f514996c003700970d7f6ede54daf8d |
| SHA1 | 6b1a6efc5765917b2c9af597d26c1c8e5551630e |
| SHA256 | 641551f7f8ad35017213b728cf85cbe52e4a2bc0bdba4215637af24695320a4e |
| SHA512 | 4857c86838d1c07387aaf3e1d5f146de8fb5897b7f053167154d79546cf01847181be4a299bbc385dec3ce264ab980ba70ce277beab94c6aca30c04239cbe38e |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
| MD5 | 24db50539f5efaa79e6a018db7e1a0d3 |
| SHA1 | e200385dd9b93b122da99165af0e8e24c5fd790e |
| SHA256 | 063ce8fee2376bb60222420f289867b39d20d77ec55e51437e7da87ec79cd6d2 |
| SHA512 | 78815a4aa23bb467156c5bdad5eb00b1b8021f3a579e9627b0a6636bb0a0ed60d0ff94e3af024846d9b91c95463e895fa269343a12b47a51d32f97bd7d0ea391 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DABA17F5E36CBE65640DD2FE24F104E7
| MD5 | c6150925cfea5941ddc7ff2a0a506692 |
| SHA1 | 9e99a48a9960b14926bb7f3b02e22da2b0ab7280 |
| SHA256 | 28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996 |
| SHA512 | b3bd41385d72148e03f453e76a45fcd2111a22eff3c7f1e78e41f6744735444e058144ed68af88654ee62b0f117949f35739daad6ad765b8cde1cff92ed2d00c |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416
| MD5 | 55540a230bdab55187a841cfe1aa1545 |
| SHA1 | 363e4734f757bdeb89868efe94907774a327695e |
| SHA256 | d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb |
| SHA512 | c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DABA17F5E36CBE65640DD2FE24F104E7
| MD5 | dc888eb20ff2e934228b207b73024dcd |
| SHA1 | 9bfc6c800e754b7739621994e417280dbca7be78 |
| SHA256 | 6c5cfd49b2d4715299f0a182153a1e0fa761e867bd98d38af39acd8f532e0497 |
| SHA512 | bfc3d088a3267371688d7b8adf975655520e1451c1669ecd000ab8498e9ba25fbc67b5fdf06eabea279004b158430b98c4f0620b7792841dd313ce040ea4b05a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | bd9777d47e4cf7d2bc40a3e5e9667fbc |
| SHA1 | e2f6f8f454da1c232c0b00218b99f8502cd61cd7 |
| SHA256 | 77e4863bf40169756022e7c0e6b50df41a7a0f7bc88128f0b4f5c4c5e8da239e |
| SHA512 | e2747688ee729e0e022c3efab9b92693d25c684b5513b3882cf7b7b09bf79fd25eef270a7284a7b3ea8684035ae867db93c078c8cd2235f807602a99b2d733f3 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 08615ef91b3d29ece93534da2da51b8a |
| SHA1 | b3e810861407daf35e891033a7c92dd33740b084 |
| SHA256 | 55cb80e776e149979bff279de79b4f1ae509d9a9204d15b5c0cd0d244345851f |
| SHA512 | 2d7fd407fc0ef46afc8569ae9eb0f4c1cf226eb108bf030dda249081b65fc0cd46517e3e7ab8a932894d14fea79d16aaf4cb7c89b8e496013aebec706e12a1b1 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | f8d43727b0e45aaf45750a9a6073faee |
| SHA1 | e8474b07f4a43274f04b6221453cfe7cd0361fd2 |
| SHA256 | 49e8143f3b6a52063b25c23866d3e629e60973ad7a9e3feffe3f1dbe4338ae05 |
| SHA512 | f66fb3ea7922596c17f82bd7e76466de7c60e9da3408a84ab6ee2b70627944f23f7f80f45a846dbb3a5ac1275ccbfc66c9aa9a142e61be794796da95d20c1d32 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 463231be34526171a2f641a02190a626 |
| SHA1 | 024ee3d607b1851b26d7979a8f63ad8d43c6d671 |
| SHA256 | 9017b0a6dfdd9053a017b9d6af39b9a44b8c36f7a32f92150faa59ec51b6375a |
| SHA512 | 2976e326278e4bc417c711896bc52e0d7eddc86a169e332ab6ff237f15b4366dc42c54fba49156a09cb2e9fc2b94ddea7f652d6b2ee6a8a21241f7fcfdef16e0 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 499f618b94572cfa17863124078b79df |
| SHA1 | a8f55f4d6240fe923c94b5279e66df54852ab470 |
| SHA256 | 221564ae1cda0c4e4409e65f7f0f9c559c3339421c2167929597805b3af60d98 |
| SHA512 | 6c82b88dfeae86821077a37edf3a581b19c4df19af048ec1231867d94b1966aa2205cd9b75462b88b34d8e1940cbb498490abb27bc3fa5a8d3edd8fcbaa230b0 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 78f658e07a07241c6d8c07b4e90d67f5 |
| SHA1 | 524f45bac92a7eb6ec1c3f506885c5dc1511dbe7 |
| SHA256 | 59d9a81ef547f01239afd3fc2e35912485253a5b7594ba280682f54a9cf0bc28 |
| SHA512 | b86c53b4dec34de9da8ae6ef25a031a3ca8131fe04c04e4028778c4915a9f1d1ab4428eb265178ccb9a0d2a90749bdb63550275eeefdc3d63cdac55bc5f09745 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 2b87e209cb6e5e6cb37e1061c069830a |
| SHA1 | 07622dbcb8e014edcf5827a6802fdecbfa1ae8d8 |
| SHA256 | 357be29e0de2a3e8d0743dbf25a196bdc882728cc7596b885def1f46d53c7e4e |
| SHA512 | 61ed2e3466e32e80b5d18a4e0050d83b8f2a8c359189aa82c6eaffa1b4daa9e39962289f68eac6e50da9c7d324a8b380cc6c239c0e3aab8b2b2bb3f3ca15eaec |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | e5fa0560ca9353ea6a9d2b7d99f49107 |
| SHA1 | 74a7ee33d988930d6c9fdd781d6ee141593f9e32 |
| SHA256 | 83bfd651a3057abad3b370805dd120233999895d7b8a5c3600e758c52add199a |
| SHA512 | 985bfb7de0d84a06f0cbab5e234187d7ba7a5cd33951df3b2fdfa5ce162cd71e71cf53ba1799e48dcda74a6a251fc27e2b61cd42f4aa1b973b5e813eac792f20 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | bad251739469aec73bbd7daa7e7585ad |
| SHA1 | 619019d7bc10c3efdbde323053297e324513c659 |
| SHA256 | dba20328758f71f909b71b4da62dedf17d115e6845bd51705ead833c7c512298 |
| SHA512 | dec8853c8e9d9940fee8aba11ecc6878787d0ea912c69888b8cedbd54b2482b2ee139a90e6203922e689f7fb49379a8ee6066f1ea62765746ba0593dcb75cc26 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 937555b57c55d8d790550757564ad7df |
| SHA1 | 3df96ca1091f78663d3d4812e0102948f9bce39a |
| SHA256 | 2790a0b6c7cb36345e53801f09684b8f5e24aa77a2c6f7227031839d35a733b4 |
| SHA512 | a32bdae682d29cc5d205a5de28de43908cac8a9d8dca66553521f0fd8e5f4ebdecdcbe557c3a7c097bb3049be56a76f773555617de416e2db841a9d9cf6b11d7 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 971135489ad73eb7e27e61a721052225 |
| SHA1 | 0109d5752a6b56d6e695729892e897992759cfd1 |
| SHA256 | c9c1a2a4e5c560d9664062f7a412b35f620396ef1a2f680c6bc6deb487caf381 |
| SHA512 | e188e3c836633e2f76627b15d6276f737428785dfc66313e7e3d6e667b36965b443ef6ed36e0cc161292483e7f0a0d03c96fe1b54afef995da54b344331578dd |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 62fb30229890295dbc9552e5e1b67063 |
| SHA1 | 481090c8c96e1be0d0796115ce029dc64c5c02ca |
| SHA256 | ad004bcd1f3ac1afe75c88cdb799883b57d53f5225082fca4077bf9f83ddf6a0 |
| SHA512 | 9010d65a38d1ddd13e491d4684ee93e3e2dd492ec2b3cb59b4171389291e7ae57411715298c873fbc091276d48cee1b4c90f71128824c58cd4c0a65e0342ec63 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 0c194f16797d8902a0c9aac06dc2e5be |
| SHA1 | d10d29f8cc355cc1e3f9c08413e9a00bdeb0f9cb |
| SHA256 | 82a0ac9bf9c6bb0f1c3596c2cff2c77025a6e4424ffc9a2add2441ac2e2fd5a8 |
| SHA512 | 9f795410e89318a625e0f8abf825370c62d978cbdd53cc8ece75f4b2516602f44e9ddaf5ea7a320e2acf399e199f08db27557d15605a44912f6ad9ad711a796a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | e680d71b0b85ac171874ab554c7a601e |
| SHA1 | 9c27bb6df473808f066a73f0bf27f059433275b2 |
| SHA256 | a79bbfc1351bb845c051bd7bc2b305ba470cb5b7916856e189a936b06c0b176e |
| SHA512 | aaa7aeb27e3797cdb67d29e9f19b4733d3e91f4a4ba271313927117eac6ce296870519932a7fd2e14cb4ab6ed79fceef23be678c60e74edfc280877a44836dcb |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 788610999db565597306c6931bdf7645 |
| SHA1 | 8d03033b1a8874d81f4f5478ca034984fbda44dd |
| SHA256 | 4f4b2aa11408f33c8c0a0df9b90f7af9dd2a857f9620b92af1467039c6efaae7 |
| SHA512 | 9ad97f5be2cc25d8581ec8fbe60116e5ec8ec47b854a2930917a21721fa3e339d9252c056099a70bbc6f7066ce7090f4b8ef1cfa44e90e70efba1fb175a2ecfb |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 73e4818d4986d1ff74c73493284ad40f |
| SHA1 | 5676d3e6d238be286e151b6885e5b93579176f5e |
| SHA256 | 726e071383296def7edfb1e8adde79884a021e607fb69cc9de4b16cb8a31d855 |
| SHA512 | 3d094f2291c409110f5c20c5235d24e4a7c29a4f19ab93cb3f5e32ad47eaa301d830b262e78d15d49353974b624e8172bd35808ee3528a97a3829e0bc1da724b |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 2641e7eef8841ef2fb9538dea8cb4826 |
| SHA1 | c6dc7c59427b8f80e7e7e830be530842be4d864d |
| SHA256 | 70508face00550b6e6349986752b9dad98eae1ac6e10c2e8ce32f59eae5bf45c |
| SHA512 | 08a7cc4133a7c539cf0442c03c52e3b1c5e6a1907b00fe0a77fdf3c6dc9d0f4e01ad98ebf07f90c97ecff59f4cba68b658724aaac89e3d07cabbda77d645061f |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | a7c05204a9428498f64d3650fc5174e4 |
| SHA1 | fc95ce5afd035479da4aa531b95bbb8ad43ee5a3 |
| SHA256 | 3c89cccd58e4f14a5874815adee4a9edcd29694d290e81b601fe45473003db6b |
| SHA512 | 364a5946f7469be163602ef2387c94ba7530d09ea6f957b3c2689fa0bf63d00c4e8b47f4cd9f1b8436b85ce19f2ab66f055d93480a4a7052d879e99eb60929a9 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | b4d22139771554b75a0190a0ae29682c |
| SHA1 | a91f3176d7bf41b9d368bcfcc93c0f5b8209e781 |
| SHA256 | 2fdc0262711263c160f636142f1ee3e895bf4f65c3e84a9f5cdcc5da95f65951 |
| SHA512 | 3717d4f121e7099553300680d9611e13bce1570908b6814be455a082b402453c0cf64597e979c6431754918ffc4181ef5ce9e7a281ca384e9a81b148be3356fb |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 644753582223c9e4fbbedd7ed3fe2814 |
| SHA1 | 8d90bd33096ecc236f0bfa4d21289285f1cc3ace |
| SHA256 | e9bdcd409f55861a4f83e9bcbeae22423e2631aaf98e84cee97eacad5f146f9f |
| SHA512 | 01c5206390fc5d76c206a81e05378f330e68d8b54c9f5cb27a1b8631f3884d33e31f9035dc5f51db8f9d65e4a57fcba8f5b6fb8ffaa0cfec0bbb5c2c8c83ef6a |
Analysis: behavioral19
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240729-en
Max time kernel
10s
Max time network
17s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@discordjs\rest\dist\index.js
Network
Files
Analysis: behavioral31
Detonation Overview
Submitted
2024-11-13 09:28
Reported
2024-11-13 09:34
Platform
win7-20240708-en
Max time kernel
119s
Max time network
125s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\livebot-win32-x64\resources\app\node_modules\@electron\get\dist\cjs\GotDownloader.js