Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3krnl/Bunif...52.dll
windows7-x64
1krnl/Bunif...52.dll
windows10-2004-x64
1krnl/Monac...ain.js
windows7-x64
3krnl/Monac...ain.js
windows10-2004-x64
3krnl/Monac...bat.js
windows7-x64
3krnl/Monac...bat.js
windows10-2004-x64
3krnl/Monac...fee.js
windows7-x64
3krnl/Monac...fee.js
windows10-2004-x64
3krnl/Monac...cpp.js
windows7-x64
3krnl/Monac...cpp.js
windows10-2004-x64
3krnl/Monac...arp.js
windows7-x64
3krnl/Monac...arp.js
windows10-2004-x64
3krnl/Monac...csp.js
windows7-x64
3krnl/Monac...csp.js
windows10-2004-x64
3krnl/Monac...css.js
windows7-x64
3krnl/Monac...css.js
windows10-2004-x64
3krnl/Monac...ile.js
windows7-x64
3krnl/Monac...ile.js
windows10-2004-x64
3krnl/Monac...arp.js
windows7-x64
3krnl/Monac...arp.js
windows10-2004-x64
3krnl/Monac.../go.js
windows7-x64
3krnl/Monac.../go.js
windows10-2004-x64
3krnl/Monac...ars.js
windows7-x64
3krnl/Monac...ars.js
windows10-2004-x64
3krnl/Monac...tml.js
windows7-x64
3krnl/Monac...tml.js
windows10-2004-x64
3krnl/Monac...ini.js
windows7-x64
3krnl/Monac...ini.js
windows10-2004-x64
3krnl/Monac...ava.js
windows7-x64
3krnl/Monac...ava.js
windows10-2004-x64
3krnl/Monac...ess.js
windows7-x64
3krnl/Monac...ess.js
windows10-2004-x64
3Analysis
-
max time kernel
133s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03/09/2024, 02:53
Static task
static1
Behavioral task
behavioral1
Sample
krnl/Bunifu_UI_v1.52.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
krnl/Bunifu_UI_v1.52.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
krnl/Monaco/vs/base/worker/workerMain.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
krnl/Monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
krnl/Monaco/vs/basic-languages/bat/bat.js
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
krnl/Monaco/vs/basic-languages/bat/bat.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
krnl/Monaco/vs/basic-languages/coffee/coffee.js
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
krnl/Monaco/vs/basic-languages/coffee/coffee.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
krnl/Monaco/vs/basic-languages/cpp/cpp.js
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
krnl/Monaco/vs/basic-languages/cpp/cpp.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
krnl/Monaco/vs/basic-languages/csharp/csharp.js
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
krnl/Monaco/vs/basic-languages/csharp/csharp.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
krnl/Monaco/vs/basic-languages/csp/csp.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
krnl/Monaco/vs/basic-languages/csp/csp.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
krnl/Monaco/vs/basic-languages/css/css.js
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
krnl/Monaco/vs/basic-languages/css/css.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
krnl/Monaco/vs/basic-languages/dockerfile/dockerfile.js
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
krnl/Monaco/vs/basic-languages/dockerfile/dockerfile.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
krnl/Monaco/vs/basic-languages/fsharp/fsharp.js
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
krnl/Monaco/vs/basic-languages/fsharp/fsharp.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
krnl/Monaco/vs/basic-languages/go/go.js
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
krnl/Monaco/vs/basic-languages/go/go.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
krnl/Monaco/vs/basic-languages/handlebars/handlebars.js
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
krnl/Monaco/vs/basic-languages/handlebars/handlebars.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
krnl/Monaco/vs/basic-languages/html/html.js
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
krnl/Monaco/vs/basic-languages/html/html.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
krnl/Monaco/vs/basic-languages/ini/ini.js
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
krnl/Monaco/vs/basic-languages/ini/ini.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
krnl/Monaco/vs/basic-languages/java/java.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
krnl/Monaco/vs/basic-languages/java/java.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
krnl/Monaco/vs/basic-languages/less/less.js
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
krnl/Monaco/vs/basic-languages/less/less.js
Resource
win10v2004-20240802-en
General
-
Target
krnl/Monaco/vs/basic-languages/csp/csp.js
-
Size
1KB
-
MD5
22ada25d590811dcff4e5f5d698e583b
-
SHA1
c43d4846967d5037ef05b102e49d1fbc54e45fbc
-
SHA256
4b5a5d7d50986b86b00833447e097c0f01a4388ce1765b48e7e371d06e3a4789
-
SHA512
c8373ea0b78114f82e8bf027473f72ada0d8acd51623152a0072111d8b3b7d5ac310a1cc510c4e4cd2e97a7686db3c87b2da675fc910898bd11108e4b50ed189
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\krnl\Monaco\vs\basic-languages\csp\csp.js1⤵PID:4220
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1420,i,11708048364682646792,608099842549576907,262144 --variations-seed-version --mojo-platform-channel-handle=1020 /prefetch:81⤵PID:3676