8187f16cc941dcf24b16594cbdb15a13f2f8c5f3986e4b6e65ca7fa89437871e | Triage

Analysis

max time kernel
4294197s
max time network
125s
platform
windows7_x64
resource
win7-20220311-en
submitted
21-03-2022 16:22

Sharing

Report Analysis Logs

General

Target

VirusOrg.Win32.Jeffo.A.exe
Size

35KB
MD5

9e3c13b6556d5636b745d3e466d47467
SHA1

2ac1c19e268c49bc508f83fe3d20f495deb3e538
SHA256

20af03add533a6870d524a7c4753b42bfceb56cddd46016c051e23581ba743f8
SHA512

5a07ba8a7fcb15f64b129fada2621252b8bc37eb34d4f614c075c064f8ac0d367301eba0c32c5e28b8aa633f6ab604f0dfcc363b34734ce0207ef0d4e8817c4b

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 14 IoCs

Processes:

VirusOrg.Win32.Jeffo.A.exe

description	ioc	process
File opened for modification	C:\Program Files\7-Zip\7zG.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\chrome.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\89.0.4389.114\chrome_pwa_launcher.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\89.0.4389.114\elevation_service.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\7-Zip\7zFM.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\7-Zip\Uninstall.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\89.0.4389.114\notification_helper.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\setup.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\chrome_proxy.exe	VirusOrg.Win32.Jeffo.A.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe	VirusOrg.Win32.Jeffo.A.exe

C:\Users\Admin\AppData\Local\Temp\VirusOrg.Win32.Jeffo.A.exe
"C:\Users\Admin\AppData\Local\Temp\VirusOrg.Win32.Jeffo.A.exe"
1⤵
PID:1956

C:\Users\Admin\AppData\Local\Temp\VirusOrg.Win32.Jeffo.A.exe
C:\Users\Admin\AppData\Local\Temp\VirusOrg.Win32.Jeffo.A.exe
1⤵
- Drops file in Program Files directory
PID:1948

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...