38bc13ef112b2f17d4d1a80243fac6a521b5d58228984aae0752d79487fa3b66

Submit
Reports

Overview

overview

Static

static

Remouse.Mi...cg.exe

windows11-21h2-x64

SecuriteIn...dE.exe

windows11-21h2-x64

SecuriteIn...ee.dll

windows11-21h2-x64

SecurityTa...up.exe

windows11-21h2-x64

Treasure.V...ox.exe

windows11-21h2-x64

VyprVPN.exe

windows11-21h2-x64

WSHSetup[1].exe

windows11-21h2-x64

Yard.dll

windows11-21h2-x64

b2bd3de3e5...2).exe

windows11-21h2-x64

b2bd3de3e5...3).dll

windows11-21h2-x64

b2bd3de3e5...4).dll

windows11-21h2-x64

cd9ccf8681...f7.exe

windows11-21h2-x64

cobaltstri...de.exe

windows11-21h2-x64

default.exe

windows11-21h2-x64

ec4f09f82d...d3.exe

windows11-21h2-x64

efd97b1038...ea4.js

windows11-21h2-x64

emotet_exe...04.exe

windows11-21h2-x64

emotet_exe...23.exe

windows11-21h2-x64

eupdate.exe

windows11-21h2-x64

f4f47c67be...3f.exe

windows11-21h2-x64

fb5d110ced...9c.exe

windows11-21h2-x64

fee15285c3...35.exe

windows11-21h2-x64

file(1).exe

windows11-21h2-x64

file.exe

windows11-21h2-x64

gjMEi6eG.exe

windows11-21h2-x64

good.exe

windows11-21h2-x64

hyundai st...1).exe

windows11-21h2-x64

hyundai st...10.exe

windows11-21h2-x64

infected d...er.exe

windows11-21h2-x64

inps_979.xls

windows11-21h2-x64

jar.jar

windows11-21h2-x64

june9.dll

windows11-21h2-x64

Resubmissions

04-12-2024 19:31

04-12-2024 11:47

04-12-2024 11:40

04-12-2024 11:35

03-12-2024 19:23

03-12-2024 16:27

Analysis

max time kernel
295s
max time network
304s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
04-12-2024 11:40

Sharing

Copy URL

Twitter E-mail

Static task

static1

15 signatures

Behavioral task

behavioral1

Sample

Remouse.Micro.Micro.v3.5.3.serial.maker.by.aaocg.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

1 signatures

300 seconds

Behavioral task

behavioral2

Sample

[email protected]

Resource

win11-20241007-en

icedid banker discovery loader trojan

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral3

Sample

SecuriteInfo.com.Generic.mg.cde56cf0169830ee.dll

Resource

win11-20241007-en

zloader 05/05 botnet discovery trojan

windows11-21h2-x64

4 signatures

300 seconds

Behavioral task

behavioral4

Sample

SecurityTaskManager_Setup.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

1 signatures

300 seconds

Behavioral task

behavioral6

Sample

VyprVPN.exe

Resource

win11-20241007-en

discovery persistence spyware stealer

windows11-21h2-x64

16 signatures

300 seconds

Behavioral task

behavioral7

Sample

WSHSetup[1].exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

2 signatures

300 seconds

Behavioral task

behavioral8

Sample

Yard.dll

Resource

win11-20241007-en

zloader nut 12/11 botnet discovery trojan

windows11-21h2-x64

9 signatures

300 seconds

Behavioral task

behavioral9

Sample

b2bd3de3e5b0e35313263bef4b1ca49c5478d472f6d37d1070a57b1f6aa4f7bb (2).exe

Resource

win11-20241007-en

zloader botnet discovery trojan

windows11-21h2-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

b2bd3de3e5b0e35313263bef4b1ca49c5478d472f6d37d1070a57b1f6aa4f7bb (3).dll

Resource

win11-20241023-en

zloader 09/04 botnet discovery trojan

windows11-21h2-x64

6 signatures

300 seconds

Behavioral task

behavioral11

Sample

b2bd3de3e5b0e35313263bef4b1ca49c5478d472f6d37d1070a57b1f6aa4f7bb (4).dll

Resource

win11-20241007-en

zloader 07/04 botnet discovery trojan

windows11-21h2-x64

6 signatures

300 seconds

Behavioral task

behavioral12

Sample

cd9ccf8681ed1a5380f8a27cd6dc927ab719b04baa6c6583a0c793a6dc00d5f7.exe

Resource

win11-20241007-en

revengerat guest discovery trojan

windows11-21h2-x64

10 signatures

300 seconds

Behavioral task

behavioral13

Sample

cobaltstrike_shellcode.exe

Resource

win11-20241007-en

cobaltstrike 305419896 backdoor discovery trojan

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral14

Sample

default.exe

Resource

win11-20241007-en

buran zeppelin defense_evasion discovery execution impact persistence ransomware

windows11-21h2-x64

19 signatures

300 seconds

Behavioral task

behavioral15

Sample

ec4f09f82d932cdd40700a74a8875b73a783cbaab1f313286adf615a5336d7d3.exe

Resource

win11-20241007-en

djvu discovery ransomware

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral16

Sample

efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

2 signatures

300 seconds

Behavioral task

behavioral17

Sample

emotet_exe_e1_ef536781ae8be4b67a7fb8aa562d84994ad250d97d5606115b6f4e6e2992363f_2020-11-17__174504.exe

Resource

win11-20241007-en

emotet epoch1 banker discovery trojan

windows11-21h2-x64

11 signatures

300 seconds

Behavioral task

behavioral18

Sample

emotet_exe_e3_93074e9fbde60e4182f5d763bac7762f2d4e2fcf9baf457b6f12e7696b3562c1_2020-11-17__182823.exe

Resource

win11-20241007-en

emotet epoch3 banker discovery trojan

windows11-21h2-x64

11 signatures

300 seconds

Behavioral task

behavioral19

Sample

eupdate.exe

Resource

win11-20241023-en

discovery

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral20

Sample

f4f47c67be61d386e7d757ff89825fa630dd5cc4ed600b5471f9cc18c21e983f.exe

Resource

win11-20241007-en

bazarbackdoor backdoor

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral21

Sample

fb5d110ced698b06c6cb8c7112792a2d37c579dcd9bde808310cb8dc88e16d9c.exe

Resource

win11-20241007-en

windows11-21h2-x64

2 signatures

300 seconds

Behavioral task

behavioral22

Sample

fee15285c36fa7e28e28c7bb9b4cd3940ef12b9907de59d11ab6e2376416d35.exe

Resource

win11-20241007-en

trickbot tar2 banker discovery trojan

windows11-21h2-x64

7 signatures

300 seconds

Behavioral task

behavioral23

Sample

file(1).exe

Resource

win11-20241007-en

windows11-21h2-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

file.exe

Resource

win11-20241007-en

persistence

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral25

Sample

gjMEi6eG.exe

Resource

win11-20241007-en

njrat discovery evasion persistence privilege_escalation trojan

windows11-21h2-x64

10 signatures

300 seconds

Behavioral task

behavioral26

Sample

good.exe

Resource

win11-20241023-en

discovery upx

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral27

Sample

hyundai steel-pipe- job 8010(1).exe

Resource

win11-20241007-en

hawkeye_reborn m00nd3v_logger collection discovery infostealer keylogger spyware stealer trojan

windows11-21h2-x64

16 signatures

300 seconds

Behavioral task

behavioral28

Sample

hyundai steel-pipe- job 8010.exe

Resource

win11-20241007-en

hawkeye_reborn m00nd3v_logger collection discovery infostealer keylogger spyware stealer trojan

windows11-21h2-x64

16 signatures

300 seconds

Behavioral task

behavioral29

Sample

infected dot net installer.exe

Resource

win11-20241007-en

xred backdoor discovery persistence

windows11-21h2-x64

15 signatures

300 seconds

Behavioral task

behavioral30

Sample

inps_979.xls

Resource

win11-20241007-en

windows11-21h2-x64

4 signatures

300 seconds

Behavioral task

behavioral31

Sample

jar.jar

Resource

win11-20241007-en

qnodeservice trojan

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral32

Sample

june9.dll

Resource

win11-20241007-en

zloader june08 june botnet discovery trojan

windows11-21h2-x64

6 signatures

300 seconds

Report Analysis Logs

General

Target

efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4.js
Size

920KB
MD5

4339e3b6d6cf2603cc780e8e032e82f6
SHA1

195c244a037815ec13d469e3b28e62a0e10bed56
SHA256

efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4
SHA512

a87c47c998f667eb8ac280f4e6dc3df182d721c44267c68ee042c17e8168115e38f2e1d59c6928ca595bb93b3bfd112cbd7bffb0ee6ff8ca81f469056f26ff87
SSDEEP

12288:obIkK9q/oPvPrNAuPfZpAvJvqWTe57Zb8Pyfdyr4G8HdsNhAwpC:obDcnrNtPfZpYvqWTeDQIdyrb8HqhNpC

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4.js
1⤵
PID:3324

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads