Analysis

  • max time kernel
    12s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 08:25

General

  • Target

    ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe

  • Size

    1.8MB

  • MD5

    81d9ad41a7aa68aef393f83c21df144d

  • SHA1

    b9a98c86729a7b6dacdbbf1cc7ceec4153d0f235

  • SHA256

    ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b

  • SHA512

    67696b3a9508793653615838f3ca514f6ffd175983f1d904fec38abc1a44ec182639e4a53ed028791e812fa79a96fdef427f317b6390f77da6395a29f223363e

  • SSDEEP

    49152:4aRrldVFqHW6dpx9yTTeOUXiBURlnK3UplzWw9inXBgZ:V/xqHhx9yWOhB0nKEHoRgZ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe
    "C:\Users\Admin\AppData\Local\Temp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe"
    1⤵
      PID:3604
      • C:\Users\Admin\AppData\Local\Temp\is-JINKS.tmp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-JINKS.tmp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.tmp" /SL5="$A01BE,1626942,54272,C:\Users\Admin\AppData\Local\Temp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.exe"
        2⤵
          PID:1144

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Users\Admin\AppData\Local\Temp\is-JINKS.tmp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.tmp

              Filesize

              11KB

              MD5

              71f2c74880cb95fb259e55485f7d9dc4

              SHA1

              a9758ed2f0b70dfd132a1bd4aa8a07b34690581e

              SHA256

              fc43c44630cd5d08cd20adc89f9048571b3d9d343f04e99607275c22a0f66886

              SHA512

              7d329febe5fb411f34b9a99f34447a499a28486d2fd0dd99941b22c37fb24476ac235f41bbeedaadae87628c1638c361a09c65b9b491c6ca97bef3f8a5f69f58

            • C:\Users\Admin\AppData\Local\Temp\is-JINKS.tmp\ccb256600d3ee3fd612cb781124b987ef47a79e2f485fc01201b7afed69c852b.tmp

              Filesize

              31KB

              MD5

              f44a29c2f738cf98889c2d819ecc08c6

              SHA1

              340c47d5fa942301faa500cf20b4775d74d9537a

              SHA256

              bbca75451e4b4adaf69b4f598439b1001d2c453d63b3bd6d719e33d152f5198b

              SHA512

              1a4f8c524ee26efc9efae288a7ad5a961b2f665eeb576392373a65311f0e0ef830edc888cb70ece788ae2f7fb494eec8ff68c4599437d5ae7a92e5cb0642b6bc

            • memory/3604-132-0x0000000000400000-0x0000000000414000-memory.dmp

              Filesize

              80KB

            • memory/3604-137-0x0000000000400000-0x0000000000414000-memory.dmp

              Filesize

              80KB