Analysis
-
max time kernel
132s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
03-07-2024 14:30
General
-
Target
Solara.Dir/Monaco/fileaccess/node_modules/call-bind/package.json
-
Size
2KB
-
MD5
7327c5e04c116460b3c73ee92292269a
-
SHA1
106489d54a0669a5271c89f87f2072cfb8e66c4f
-
SHA256
e8fc7600526cc041bfcd3a562e6cfdb53952a7f7fb4fcc899949e4c51c586155
-
SHA512
93f2327154e59b1f6fa2f55659fd5a8bae1da6cb4dc2ea5ef736ed6abbcbb2840286be9346bea22a3dd52371ac842870bd388dcc1e5b673696bc0cad868422d8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\call-bind\package.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx