Analysis
-
max time kernel
91s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/08/2024, 15:18 UTC
General
-
Target
Solara/Monaco/fileaccess/node_modules/safe-buffer/index.js
-
Size
1KB
-
MD5
35de14728187b87c9ab687c3bdc37436
-
SHA1
94ae42f086b35537cc69d82c0f55c6d59e6b8d98
-
SHA256
184d5c4a83512e3f49d4d5b52f7073f601f933bad11f1fbb3ad364ca5e6478e1
-
SHA512
b2b3ef941a8d76480f519b68cd05ecf0aace617a2c414f3e7d375a59718b06f6e7bf88ef384f3e400642431c296bf400f80048e4ad8efb93860e41d697f337b1
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\Solara\Monaco\fileaccess\node_modules\safe-buffer\index.js1⤵
Network
-
DNS8.8.8.8.in-addr.arpaRemote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle -
DNS64.159.190.20.in-addr.arpaRemote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTRResponse
-
DNS26.35.223.20.in-addr.arpaRemote address:8.8.8.8:53Request26.35.223.20.in-addr.arpaIN PTRResponse
-
DNS172.210.232.199.in-addr.arpaRemote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
DNS172.210.232.199.in-addr.arpaRemote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTR
No results found
-
8.8.8.8:538.8.8.8.in-addr.arpadns
DNS Request
8.8.8.8.in-addr.arpa
-
8.8.8.8:5364.159.190.20.in-addr.arpadns
DNS Request
64.159.190.20.in-addr.arpa
-
8.8.8.8:5326.35.223.20.in-addr.arpadns
DNS Request
26.35.223.20.in-addr.arpa
-
8.8.8.8:53172.210.232.199.in-addr.arpadns
DNS Request
172.210.232.199.in-addr.arpa
DNS Request
172.210.232.199.in-addr.arpa