Overview

overview

10

Static

static

10

ZHacks____...dme.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...val.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...nge.js

windows11-21h2-x64

3

ZHacks____...ref.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...ion.js

windows11-21h2-x64

3

ZHacks____...ess.js

windows11-21h2-x64

3

ZHacks____...nit.js

windows11-21h2-x64

3

ZHacks____...ery.js

windows11-21h2-x64

3

ZHacks____...est.js

windows11-21h2-x64

3

ZHacks____...nse.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...yer.js

windows11-21h2-x64

3

ZHacks____...ute.js

windows11-21h2-x64

3

ZHacks____...ils.js

windows11-21h2-x64

3

ZHacks____...iew.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

ZHacks____...dex.js

windows11-21h2-x64

3

ZHacks____...DME.js

windows11-21h2-x64

3

Analysis

  • max time kernel
    447s
  • max time network
    492s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    11-05-2024 09:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ZHacks____SolaraBETA3/Monaco/fileaccess/node_modules/express/lib/utils.js

  • Size

    5KB

  • MD5

    d0af8049aeae0b030cada613fe49ef9c

  • SHA1

    8d7970a663c3045c366545610ee53f0ba0f33144

  • SHA256

    9035c6d946ece511e749043cc823e32d3efe6727b8a9d52aac89649e99584f09

  • SHA512

    3fbf3afbe7711b7426e81129b3d1728d1b8717c6f0d7ba574d6089aef6bb5e6e5c566a50cd5d1ced5c385b2fa9f5c378ecb7fcbfe4970fa7db805932422578b8

  • SSDEEP

    96:uXcRzPReHkGVZwJ5J98tK9vgkDmKv0DzJal2g6PigcwOVcz2aIDzMcrJk:uXsJePZYhxDZv4z+HYiglOVcz27/Mcry

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\ZHacks____SolaraBETA3\Monaco\fileaccess\node_modules\express\lib\utils.js
    1⤵
      PID:3492

    Network

    MITRE ATT&CK Matrix ATT&CK v13

    Initial Access

    Execution

    Command and Scripting Interpreter

    1
    T1059

    JavaScript

    1
    T1059.007

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Resource Development

    Reconnaissance

    Replay Monitor

    Loading Replay Monitor...

    Downloads