a1941786149857faebfd4f2731022d8af6aaa984b981bffd40bd123472b0beb4 | Triage

Submit
Reports

Overview

overview

Static

static

Battly-Lau...ws.exe

windows7-x64

7

Battly-Lau...ws.exe

windows10-2004-x64

7

resources/...zip.js

windows7-x64

3

resources/...zip.js

windows10-2004-x64

3

resources/...der.js

windows7-x64

3

resources/...der.js

windows10-2004-x64

3

resources/...dex.js

windows7-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...der.js

windows7-x64

3

resources/...der.js

windows10-2004-x64

3

resources/...ter.js

windows7-x64

3

resources/...ter.js

windows10-2004-x64

3

resources/...dex.js

windows7-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...ter.js

windows7-x64

3

resources/...ter.js

windows10-2004-x64

3

resources/...pto.js

windows7-x64

3

resources/...pto.js

windows10-2004-x64

3

resources/...nts.js

windows7-x64

3

resources/...nts.js

windows10-2004-x64

3

resources/...ors.js

windows7-x64

3

resources/...ors.js

windows10-2004-x64

3

resources/...ttr.js

windows7-x64

3

resources/...ttr.js

windows10-2004-x64

3

resources/...tem.js

windows7-x64

3

resources/...tem.js

windows10-2004-x64

3

resources/...dex.js

windows7-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...ils.js

windows7-x64

3

resources/...ils.js

windows10-2004-x64

3

resources/...try.js

windows7-x64

3

resources/...try.js

windows10-2004-x64

3

Resubmissions

01-07-2024 03:43

240701-eadd6avfrg 10

Analysis

max time kernel
236s
max time network
261s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
01-07-2024 03:43

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Battly-Launcher-Windows.exe

Resource

win7-20240508-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral2

Sample

Battly-Launcher-Windows.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

8 signatures

300 seconds

Behavioral task

behavioral3

Sample

resources/app/node_modules/adm-zip/adm-zip.js

Resource

win7-20240419-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral4

Sample

resources/app/node_modules/adm-zip/adm-zip.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral5

Sample

resources/app/node_modules/adm-zip/headers/entryHeader.js

Resource

win7-20240508-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral6

Sample

resources/app/node_modules/adm-zip/headers/entryHeader.js

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral7

Sample

resources/app/node_modules/adm-zip/headers/index.js

Resource

win7-20240220-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral8

Sample

resources/app/node_modules/adm-zip/headers/index.js

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral9

Sample

resources/app/node_modules/adm-zip/headers/mainHeader.js

Resource

win7-20240221-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral10

Sample

resources/app/node_modules/adm-zip/headers/mainHeader.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

resources/app/node_modules/adm-zip/methods/deflater.js

Resource

win7-20240419-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral12

Sample

resources/app/node_modules/adm-zip/methods/deflater.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral13

Sample

resources/app/node_modules/adm-zip/methods/index.js

Resource

win7-20240611-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral14

Sample

resources/app/node_modules/adm-zip/methods/index.js

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral15

Sample

resources/app/node_modules/adm-zip/methods/inflater.js

Resource

win7-20240508-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral16

Sample

resources/app/node_modules/adm-zip/methods/inflater.js

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral17

Sample

resources/app/node_modules/adm-zip/methods/zipcrypto.js

Resource

win7-20240221-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral18

Sample

resources/app/node_modules/adm-zip/methods/zipcrypto.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral19

Sample

resources/app/node_modules/adm-zip/util/constants.js

Resource

win7-20240220-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral20

Sample

resources/app/node_modules/adm-zip/util/constants.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral21

Sample

resources/app/node_modules/adm-zip/util/errors.js

Resource

win7-20240508-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral22

Sample

resources/app/node_modules/adm-zip/util/errors.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral23

Sample

resources/app/node_modules/adm-zip/util/fattr.js

Resource

win7-20231129-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral24

Sample

resources/app/node_modules/adm-zip/util/fattr.js

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

resources/app/node_modules/adm-zip/util/fileSystem.js

Resource

win7-20240419-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral26

Sample

resources/app/node_modules/adm-zip/util/fileSystem.js

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral27

Sample

resources/app/node_modules/adm-zip/util/index.js

Resource

win7-20240611-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral28

Sample

resources/app/node_modules/adm-zip/util/index.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral29

Sample

resources/app/node_modules/adm-zip/util/utils.js

Resource

win7-20231129-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral30

Sample

resources/app/node_modules/adm-zip/util/utils.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral31

Sample

resources/app/node_modules/adm-zip/zipEntry.js

Resource

win7-20240508-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral32

Sample

resources/app/node_modules/adm-zip/zipEntry.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

300 seconds

Report Analysis Logs

General

Target

resources/app/node_modules/adm-zip/adm-zip.js
Size

30KB
MD5

9b6da3cd4a4ce0963e80d0e6dc1a11f1
SHA1

fce6550c2231f60425661f2f7db99efff491cdff
SHA256

cb49867d6ffe8e7c08ad0e6466c86450b0f81910069ed1ad9d5b7b9c27367929
SHA512

38f325ced4315f7fd39f9ec885e1a35f8d5c49bfe9721c3ae0b54d040c76e7df3e6d557f76bb5783594b0fe5c15f9e73f8c7a21fee373ecbd97ed9220d3127ba
SSDEEP

384:T4XzvHf944AOOLlPHWuFz5AjHxLPVzVbAB1kfVeHW3W5SqdCLFWYi82et/2Ktvbe:UzvF4DPHzFn11IqdCpoFaU

Score

3^/10

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\resources\app\node_modules\adm-zip\adm-zip.js
1⤵
PID:4552

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy