97d7996c657dac39497001683776ea390ba3f3f70f31da017547bbd4590701d7 | Triage

Analysis

max time kernel
149s
max time network
154s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
08/08/2024, 08:12 UTC

Sharing

Report Analysis Logs

General

Target

Release/bin/Monaco/vs/loader.js
Size

31KB
MD5

1f4fb062c471465ac8a71e7c7de863bf
SHA1

2882b45fb948339c82c9f672ca38a063bd98b930
SHA256

d423befdd508b4540874b3dee8fd559fb7a0e56a29d7ca774eaed0df784bc2f1
SHA512

5913c5a0ec50021c93910bdbb65338256dea4339866c010f328c819d29c415056943f0875f9ff0b120924ba9ed4af91d7d23d0b0aeb5cec0638823463a3b007f
SSDEEP

768:MFvC2l3lndKLa2wE7n0UvEUwtBSOjIiOGagWDrKdF6eCGiVajW4g83:Kz3lnGbF5KBn

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Release\bin\Monaco\vs\loader.js
1⤵
PID:3928

Network

DNS

28.173.189.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

28.173.189.20.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

28.173.189.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

28.173.189.20.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads