Analysis
-
max time kernel
12s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 08:25
Static task
static1
Behavioral task
behavioral1
Sample
ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe
Resource
win10v2004-20220812-en
General
-
Target
ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe
-
Size
1.8MB
-
MD5
81d9ad41a7aa68aef393f83c21df144d
-
SHA1
b9a98c86729a7b6dacdbbf1cc7ceec4153d0f235
-
SHA256
ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b
-
SHA512
67696b3a9508793653615838f3ca514f6ffd175983f1d904fec38abc1a44ec182639e4a53ed028791e812fa79a96fdef427f317b6390f77da6395a29f223363e
-
SSDEEP
49152:4aRrldVFqHW6dpx9yTTeOUXiBURlnK3UplzWw9inXBgZ:V/xqHhx9yWOhB0nKEHoRgZ
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe"C:\Users\Admin\AppData\Local\Temp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe"1⤵PID:3604
-
C:\Users\Admin\AppData\Local\Temp\is-JINKS.tmp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.tmp"C:\Users\Admin\AppData\Local\Temp\is-JINKS.tmp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.tmp" /SL5="$A01BE,1626942,54272,C:\Users\Admin\AppData\Local\Temp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe"2⤵PID:1144
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\is-JINKS.tmp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.tmp
Filesize11KB
MD571f2c74880cb95fb259e55485f7d9dc4
SHA1a9758ed2f0b70dfd132a1bd4aa8a07b34690581e
SHA256fc43c44630cd5d08cd20adc89f9048571b3d9d343f04e99607275c22a0f66886
SHA5127d329febe5fb411f34b9a99f34447a499a28486d2fd0dd99941b22c37fb24476ac235f41bbeedaadae87628c1638c361a09c65b9b491c6ca97bef3f8a5f69f58
-
C:\Users\Admin\AppData\Local\Temp\is-JINKS.tmp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.tmp
Filesize31KB
MD5f44a29c2f738cf98889c2d819ecc08c6
SHA1340c47d5fa942301faa500cf20b4775d74d9537a
SHA256bbca75451e4b4adaf69b4f598439b1001d2c453d63b3bd6d719e33d152f5198b
SHA5121a4f8c524ee26efc9efae288a7ad5a961b2f665eeb576392373a65311f0e0ef830edc888cb70ece788ae2f7fb494eec8ff68c4599437d5ae7a92e5cb0642b6bc