Overview
overview
8Static
static
3WinRAR Pro...ve.zip
windows7-x64
7WinRAR Pro...ve.zip
windows10-2004-x64
8WinRAR Pro...ve.exe
windows7-x64
8WinRAR Pro...ve.exe
windows10-2004-x64
8content_shell.js
windows7-x64
3content_shell.js
windows10-2004-x64
3ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
1icudtl.dat
windows7-x64
3icudtl.dat
windows10-2004-x64
3natives_blob.js
windows7-x64
3natives_blob.js
windows10-2004-x64
3node.dll
windows7-x64
1node.dll
windows10-2004-x64
1resources/app.js
windows7-x64
3resources/app.js
windows10-2004-x64
3resources/electron.js
windows7-x64
3resources/electron.js
windows10-2004-x64
3v8_context...ot.bin
windows7-x64
3v8_context...ot.bin
windows10-2004-x64
3Analysis
-
max time kernel
93s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19/11/2024, 18:04
Static task
static1
Behavioral task
behavioral1
Sample
WinRAR Pro 2024 - Full Active.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
WinRAR Pro 2024 - Full Active.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
WinRAR Pro 2024 - Full Active.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
WinRAR Pro 2024 - Full Active.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
content_shell.js
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
content_shell.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
ffmpeg.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
ffmpeg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
icudtl.dat
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
icudtl.dat
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
natives_blob.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
natives_blob.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
node.dll
Resource
win7-20241023-en
Behavioral task
behavioral14
Sample
node.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
resources/app.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
resources/app.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
resources/electron.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
resources/electron.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
v8_context_snapshot.bin
Resource
win7-20241023-en
Behavioral task
behavioral20
Sample
v8_context_snapshot.bin
Resource
win10v2004-20241007-en
General
-
Target
content_shell.js
-
Size
7.1MB
-
MD5
ab9992f3bef24d6ffd8e76ce56f96de5
-
SHA1
531cc9767c3d3b4a342516e97326b859b3b3ea5a
-
SHA256
8818e8af6a3475e6bb6ebbd9d69bbac67fc156eca73840125987c1e9f9f2c92a
-
SHA512
3570882596b5ffef77da8758287a997504664a07926bd639cf01b2ad35e8fbd0ab00de669cf87269a241e073a2038f9f369e8f76d04282c7fe894956b57eb888
-
SSDEEP
49152:8t/rH6WCKe6PUJEKN3sVZowS5sl4G1hdAKeiCkefAIDzLFPVA070FR4h70F9Zdu2:8L6xzJEssZou11hGk4XrwqdaUO
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs