587dbccca7d8a07ecb47cdbaa079e40fc4f38116251ac140347ff874f918ffa0 | Triage

Analysis

max time kernel
1483s
max time network
1497s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
19/06/2024, 18:02 UTC

Sharing

Report Analysis Logs

General

Target

Solara.Dir/Monaco/fileaccess/node_modules/body-parser/lib/types/raw.js
Size

1KB
MD5

acb38e4fe575afaf8d1a257e47c6e362
SHA1

ea7411ff5a71df8d426322d07103e5894630e29b
SHA256

4e9cc80a7ee8bd667c68c264b4c374b28e731246ddb6ec22c3968daf837e30a2
SHA512

157427ad25390339b045b9bb81753709498b69b2cc8b9c918c19d52d1cb4f6bbe5b6b07885d0a7f66ef359b7080dc9a42216f71911b08ade04c1a112192bff50

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\body-parser\lib\types\raw.js
1⤵
PID:4596

Network

DNS

tse1.mm.bing.net

Remote address:

8.8.8.8:53

Request

tse1.mm.bing.net

IN A

Response

tse1.mm.bing.net

IN CNAME

mm-mm.bing.net.trafficmanager.net

mm-mm.bing.net.trafficmanager.net

IN CNAME

ax-0001.ax-msedge.net

ax-0001.ax-msedge.net

IN A

150.171.27.10

ax-0001.ax-msedge.net

IN A

150.171.28.10
DNS

10.27.171.150.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.27.171.150.in-addr.arpa

IN PTR

Response
DNS

arc.msn.com

Remote address:

8.8.8.8:53

Request

arc.msn.com

IN A

Response

arc.msn.com

IN CNAME

arc.trafficmanager.net

arc.trafficmanager.net

IN CNAME

iris-de-prod-azsc-v2-neu.northeurope.cloudapp.azure.com

iris-de-prod-azsc-v2-neu.northeurope.cloudapp.azure.com

IN A

20.223.35.26
DNS

26.35.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.35.223.20.in-addr.arpa

IN PTR

Response

150.171.27.10:443

tse1.mm.bing.net

tls

131.9kB
3.8MB
2793
2791
150.171.27.10:443

tse1.mm.bing.net

tls

1.6kB
7.2kB
17
15
150.171.27.10:443

tse1.mm.bing.net

tls

1.6kB
7.2kB
17
15
150.171.27.10:443

tse1.mm.bing.net

tls

1.6kB
7.2kB
17
15
150.171.27.10:443

tse1.mm.bing.net

tls

1.6kB
7.2kB
17
15

8.8.8.8:53

tse1.mm.bing.net

dns

262 B
660 B
4
4

DNS Request

tse1.mm.bing.net

DNS Response

150.171.27.10

150.171.28.10

DNS Request

10.27.171.150.in-addr.arpa

DNS Request

arc.msn.com

DNS Response

20.223.35.26

DNS Request

26.35.223.20.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads