Analysis

  • max time network
    512s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/01/2023, 19:20

Errors

Reason
Reading agent response: read tcp 10.127.0.1:33278->10.127.0.31:8000: read: connection timed out

General

  • Target

    MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_m.js

  • Size

    227B

  • MD5

    025034188192e15b34dc999fcb88e75b

  • SHA1

    ec5e90cc0d51aeb7328df6c3071fa810c289e3b4

  • SHA256

    a5c83f64422199bf66e5519848210b3328d685dfb95bb24a06b83043a57d307e

  • SHA512

    d4265dbe1be6b92cd2979174ddf526aad60fbf0a80c96612a3ad58c3293198668bb7b62d8e742f17792244dfce03b1761cbb447d60ee5a606bc0b4790fd5e0a9

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads