Analysis
-
max time kernel
126s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240611-en -
resource tags
-
submitted
25/06/2024, 13:40 UTC
General
-
Target
Solara.Dir/Monaco/fileaccess/node_modules/content-type/index.js
-
Size
4KB
-
MD5
4781c7ea0309edac61c3a36e3ea9da10
-
SHA1
1b6e7e8d1963ce958cf0f225223fadb5ef12f86d
-
SHA256
7d76ae0f8ecc0a8c053de97b0f695f3fa3df33f692d1bd241307995304e5f63d
-
SHA512
d458f8962f44ec30bf519a54aef063960d9cac2a954493383fc2ef46781c3244740f18c7daf1821b4e0babbd56b356228f7247ce40de9f3276de91a71c66c78c
-
SSDEEP
96:CJFvvhHgqZlI8IDzdlalSqZf/gf6GosMySqUqMGa9Nw+j0i8L:CJFHhAqbI8IdUYVhvJMG6Yii
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\content-type\index.js1⤵
Network
-
DNS30.243.111.52.in-addr.arpaRemote address:8.8.8.8:53Request30.243.111.52.in-addr.arpaIN PTRResponse -
DNS8.173.189.20.in-addr.arpaRemote address:8.8.8.8:53Request8.173.189.20.in-addr.arpaIN PTRResponse
-
DNS82.90.14.23.in-addr.arpaRemote address:8.8.8.8:53Request82.90.14.23.in-addr.arpaIN PTRResponse82.90.14.23.in-addr.arpaIN PTRa23-14-90-82deploystaticakamaitechnologiescom
No results found
-
8.8.8.8:5330.243.111.52.in-addr.arpadns
DNS Request
30.243.111.52.in-addr.arpa
-
8.8.8.8:538.173.189.20.in-addr.arpadns
DNS Request
8.173.189.20.in-addr.arpa
-
8.8.8.8:5382.90.14.23.in-addr.arpadns
DNS Request
82.90.14.23.in-addr.arpa