Overview

overview

7

Static

static

3

Unconfirme...36.zip

windows7-x64

1

Unconfirme...36.zip

windows10-2004-x64

1

bin/Monaco...et.css

windows7-x64

3

bin/Monaco...et.css

windows10-2004-x64

7

bin/Monaco...ng.css

windows7-x64

3

bin/Monaco...ng.css

windows10-2004-x64

7

bin/Monaco...et.css

windows7-x64

3

bin/Monaco...et.css

windows10-2004-x64

7

bin/Monaco...on.css

windows7-x64

3

bin/Monaco...on.css

windows10-2004-x64

7

bin/Monaco...et.css

windows7-x64

3

bin/Monaco...et.css

windows10-2004-x64

7

bin/Monaco...ks.css

windows7-x64

3

bin/Monaco...ks.css

windows10-2004-x64

7

bin/Monaco...er.css

windows7-x64

3

bin/Monaco...er.css

windows10-2004-x64

7

bin/Monaco...ts.css

windows7-x64

3

bin/Monaco...ts.css

windows10-2004-x64

7

bin/Monaco...et.css

windows7-x64

3

bin/Monaco...et.css

windows10-2004-x64

7

bin/Monaco...on.css

windows7-x64

3

bin/Monaco...on.css

windows10-2004-x64

7

bin/Monaco...st.css

windows7-x64

3

bin/Monaco...st.css

windows10-2004-x64

7

bin/Monaco...et.css

windows7-x64

3

bin/Monaco...et.css

windows10-2004-x64

7

bin/Monaco...lp.css

windows7-x64

3

bin/Monaco...lp.css

windows10-2004-x64

7

bin/Monaco...n.d.ts

windows7-x64

1

bin/Monaco...n.d.ts

windows10-2004-x64

6

bin/Monaco...e.d.ts

windows7-x64

1

bin/Monaco...e.d.ts

windows10-2004-x64

6

Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    27-07-2024 06:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/Monaco/package/esm/vs/editor/contrib/links/links.css

  • Size

    559B

  • MD5

    bd1f59595a326c329fba541cac3b1fe6

  • SHA1

    1ec3910d84b9766022e988ed062f3853b7f4e06f

  • SHA256

    5407b8a20344cd67547d7f69c009b2624159e980e4160d005e4373043ba04b5c

  • SHA512

    9c62c32868811cd92dd1d1d790089c0bc4f380b8b30f3d71f576a0f70b0b0c92de186a8f2070c76d7debca7aa25afb9657671e62d118b65356b8cade781340c9

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\bin\Monaco\package\esm\vs\editor\contrib\links\links.css
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2704
    • C:\Windows\system32\NOTEPAD.EXE
      "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\bin\Monaco\package\esm\vs\editor\contrib\links\links.css
      2⤵
      • Opens file in notepad (likely ransom note)
      PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads