a2eaa3485a9efff93e652cb5e3fef2bddaa1e631d2abc258a66f3d3b7f09f3de | Triage™

Analysis

max time kernel
71s
max time network
148s
platform
windows10_x64
resource
win10v20201028
submitted
28/11/2020, 10:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7c14e45f1b37c59138cafd3173e7acd5.exe
Size 873KB
Sample201128-615lnm96na
SHA256 a2eaa3485a9efff93e652cb5e3fef2bddaa1e631d2abc258a66f3d3b7f09f3de
MD5 7c14e45f1b37c59138cafd3173e7acd5
SHA1 7ea141eb9f013e0dce8ee2b6a692153fefbcbb3a
SHA512 52ce187cc850430f1710e898cf28a5f3a770f3a972f94f6c6c68c6e0042a5dd79b7451dbc95121dee4c0f005dbee2ccfa0aa8fc1850f3d66d7cd6c6c5a61490c
MD5 SHA1 SHA512

Score

8^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
3932	jkpwsl.exe

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ifwamlndajluwhjxipl.job	jkpwsl.exe
File created	C:\Windows\Tasks\jkpwsl.job	7c14e45f1b37c59138cafd3173e7acd5.exe
File opened for modification	C:\Windows\Tasks\jkpwsl.job	7c14e45f1b37c59138cafd3173e7acd5.exe

C:\Users\Admin\AppData\Local\Temp\7c14e45f1b37c59138cafd3173e7acd5.exe
"C:\Users\Admin\AppData\Local\Temp\7c14e45f1b37c59138cafd3173e7acd5.exe"
1⤵
- Drops file in Windows directory
PID:4764

C:\ProgramData\kdhte\jkpwsl.exe
C:\ProgramData\kdhte\jkpwsl.exe start
1⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:3932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads