Analysis
-
max time kernel
315s -
max time network
1602s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
25/07/2024, 16:33
General
-
Target
Solara/Monaco/fileaccess/node_modules/iconv-lite/package.json
-
Size
1KB
-
MD5
a8b97f25878ddc5419a9afe173037035
-
SHA1
a1e76edb6428e44345ed3851ff7af5d850434cf5
-
SHA256
6f7c96c32f7d6e0498be71b0ccedaf298bb00ab4dd40c1d63655ec53477db384
-
SHA512
adeb2c6aa4710ed983471a3c4485f50bc5e0da9ed28331e0d768fb23c3f2239a15c04cfab848cc00a56786425cee50cae18a76fb2db3ef27a34797782a131b4c
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Solara\Monaco\fileaccess\node_modules\iconv-lite\package.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx