Analysis

  • max time network
    238s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/01/2023, 19:20

Errors

Reason
Reading agent response: read tcp 10.127.0.1:45090->10.127.0.9:8000: read: connection timed out

General

  • Target

    MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_m.js

  • Size

    1KB

  • MD5

    b790c1b845de6a31abb6171f0a501936

  • SHA1

    598118e2429f1740537e78c4e85693bef6d57d1c

  • SHA256

    4eb8f4bc7f810907a1627bfad3792efe9ed93779f899a990fcd086777b2a0e4a

  • SHA512

    ad0cb851615e45029b239fb8933d4897976f15e30c463c72ccdd7c6e2ee40c08e9c4551f48c4b73e66e36bfb41809ac2e9dda1c6c41885e0d98721d6b374f015

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads