Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21/11/2024, 08:40
Static task
static1
Behavioral task
behavioral1
Sample
d7ff659699baa3a424a4cc76ce58da6f4defe434fe0829f43607601bdb514836.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d7ff659699baa3a424a4cc76ce58da6f4defe434fe0829f43607601bdb514836.js
Resource
win10v2004-20241007-en
General
-
Target
d7ff659699baa3a424a4cc76ce58da6f4defe434fe0829f43607601bdb514836.js
-
Size
15KB
-
MD5
a8a499a45a7cc0a1d96075f6fdfc8287
-
SHA1
cc09e3520639553778d45a6caede97ffbc820b8c
-
SHA256
d7ff659699baa3a424a4cc76ce58da6f4defe434fe0829f43607601bdb514836
-
SHA512
5c505f0cd68f4cb0f6553105c452574769c7ac0a6acb9b0cd06f29ee7f6e0008d32c8fea851722bf9469a0205734659d9d22e26063c0f2bb205d3087a4f7bc64
-
SSDEEP
384:uuayBjrTwpSEtzz+Ah57j6uRmS3s5aUkFR:/ayVYpZ57jzHWatFR
Malware Config
Signatures
-
Blocklisted process makes network request 7 IoCs
flow pid Process 7 3068 wscript.exe 9 3068 wscript.exe 13 3068 wscript.exe 14 3068 wscript.exe 15 3068 wscript.exe 16 3068 wscript.exe 17 3068 wscript.exe -
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3VL8XEP\counter[2].htm
Filesize168B
MD582f04704c04c2706b1b96a73be2ff3a9
SHA18cd210a378b7f54ce8945cdf1c7ce1f696171eee
SHA256ede97dbf06b3e703cd950b3591a29351ce9b24eccab58b1a913b3c7e4571bf02
SHA51261f4e5ddd3d46293dc64151f21e249b80d5261b9cf1eb788aed2e399e80ca60fdf485736ee6fca57471b4b2b4ef8744aa52b59bf035ee922f2736fc87d78e94d