Analysis
- user interaction
yes - max time kernel
898s - max time network
276s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 07:43
Static task
static1
Behavioral task
behavioral1
Sample
authorize.js
Resource
win10v2004-20260911-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
authorize.js
Resource
win11ltsc2024-20260911-en
1 signatures
900 seconds
General
- Target authorize.js
- Size 64KB
- Sample261027-jkh5lsbv2x
- SHA256 f5041d827abc78dd794191a98a87b41532d29ba644abf3ea8eab65070cc8ef5f
- MD5 1c7ffaaec2e20f18ba6fa0764731ab00
- SHA1 a3f4e6081d8e595f0489bbc605474d8294d9e4cf
- SHA512 9082217f2be0c23f8522e94d3d82cbeab7a1831a29c3663d7df007b6e5c3156e9165f57ed98219de4b2ab993b6255b6d09d2a2aeb8e92f2cc09c0dcc1a79f6b4
- SSDEEP 1536:H/w0H8GLG2ynkIYFvQEsnfn2ynEo7hYq8Z9Tjuokmap5vPozvucwH:4I8lsFvDKf2E97hYza/Ai
- TLSH T1B953AEA63B84782BCB425974C07EBB06AA7D154354C4C8D8F14DC5CE5EBABEB8A73107
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\authorize.js1⤵PID:2640
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4732
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5528