Overview

overview

10

Static

static

10

ZHacks____...dme.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...val.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...nge.js

windows11-21h2-x64

3

ZHacks____...ref.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...ion.js

windows11-21h2-x64

3

ZHacks____...ess.js

windows11-21h2-x64

3

ZHacks____...nit.js

windows11-21h2-x64

3

ZHacks____...ery.js

windows11-21h2-x64

3

ZHacks____...est.js

windows11-21h2-x64

3

ZHacks____...nse.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...yer.js

windows11-21h2-x64

3

ZHacks____...ute.js

windows11-21h2-x64

3

ZHacks____...ils.js

windows11-21h2-x64

3

ZHacks____...iew.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

Analysis

  • max time kernel
    449s
  • max time network
    457s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    11-05-2024 09:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ZHacks____SolaraBETA3/Monaco/fileaccess/node_modules/express/lib/request.js

  • Size

    12KB

  • MD5

    7de9073e4cd5121ebd975f8fc252e3b3

  • SHA1

    8c91f08385b3d241b180ea5326a3e1be016945d1

  • SHA256

    64ac10752c0516d789cb0698bb433586d4ce3b46f7f06ee3cb2880762b8bda40

  • SHA512

    f7ccd3077e6a4d1e2a2b008bb3156da88f7705b92086b56755c7ec95ccdf1f79583ae400f51939c9de6daf03e9f6641371720186f19366c8111e7471351621b1

  • SSDEEP

    384:uqOLFAdcH1y3xzl8TuoksKJW9vsRHgViHfWReYSi59lrvVK:+Adc2lEfl79vs17HfWRSidvVK

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\ZHacks____SolaraBETA3\Monaco\fileaccess\node_modules\express\lib\request.js
    1⤵
      PID:3488

    Network

    MITRE ATT&CK Matrix ATT&CK v13

    Initial Access

    Execution

    Command and Scripting Interpreter

    1
    T1059

    JavaScript

    1
    T1059.007

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Resource Development

    Reconnaissance

    Replay Monitor

    Loading Replay Monitor...

    Downloads