Analysis
-
max time kernel
118s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
11-09-2024 18:22
General
-
Target
Jules/Monaco/package/esm/vs/editor/contrib/message/messageController.css
-
Size
1KB
-
MD5
d323660d8c213a9b9da0f945ee4f69ec
-
SHA1
f01d088d4a5c44d3f4d95ba9217f35c37f5052f1
-
SHA256
08cd809821857f05946095e4a0b13a7e5b3962815585442c4f81d477c14d5c6a
-
SHA512
b9b71eb3a3b550a5403e9af3f75b25c83979377b84be78e49f6175da59e28b33418978ad0a5f21919c93861d91e71b06434c30a6968640861f963a07f3888cf2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Opens file in notepad (likely ransom note) 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Jules\Monaco\package\esm\vs\editor\contrib\message\messageController.css1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Jules\Monaco\package\esm\vs\editor\contrib\message\messageController.css2⤵
- Opens file in notepad (likely ransom note)
-