Analysis
- user interaction
yes - max time kernel
898s - max time network
461s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
24/08/2026, 14:19
Static task
static1
Behavioral task
behavioral1
Sample
adminer.js
Resource
win11-20260513-en
1 signatures
900 seconds
General
- Target adminer.js
- Size 22KB
- Sample260824-rnaxeahl91
- SHA256 15cd94b5c307cad268d00b880380b5a8acb1771027eb726fa83f9fe3be94bc81
- MD5 d61666411b48f851fac5932ad3505b76
- SHA1 5684eed8b43a7f98a3bb14cd0a0f3b43e7e8f4d0
- SHA512 aa65f62ad64c85eed69d62a0dd91d42ab3a5f60d8e8294981c61576f13c475c5b2bbb43c7cfee167a8883fcc6c8b9c54cefee60382d640cfdaeece164b508580
- SSDEEP 192:LigIV5GNBtScVDxQ8qdyc41X7ZYzNlI2ayp7OdbA/pg3IMHXJqq15DTl+:Lif5MguffX6xy+wpcp
- TLSH T14CA2A61270C02D769173EBF997976A19FDA6412B860208047DDC63E72FF1D408A7BFA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\adminer.js1⤵PID:1292
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2520
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost1⤵PID:864