Overview

overview

7

Static

static

3

647e7e21bdacb6_JC.exe

windows7-x64

7

647e7e21bdacb6_JC.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    16-07-2023 10:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    647e7e21bdacb6_JC.exe

  • Size

    237KB

  • MD5

    647e7e21bdacb6a3fa6892e0cbc74c34

  • SHA1

    cb368c134d3b67b07bf7b87392474e036425db15

  • SHA256

    c2561a3ed7f52e13bec92e9f73884d8b64c9adee304d4e0f5b6010c846d55c0e

  • SHA512

    d6badbb362053fb41730ba01cc82e61204129a27b86720bc68cd68ecb3fcbf737daf4bc3455b7fa880e18d49ea0606c81ebedaa6e0e66e079501b905a239ab74

  • SSDEEP

    3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\647e7e21bdacb6_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\647e7e21bdacb6_JC.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1348
    • C:\Program Files\.exe
      "C:\Program Files\\.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\.exe
    Filesize

    237KB

    MD5

    0e9b28d93627689ad76d55530620d530

    SHA1

    6d16ca54ee041e0d7d3f1fba64ed26de3ec9f821

    SHA256

    ecff142009ccf454b732662e5603dc818effd635b7d82b7f3397757775ccebad

    SHA512

    f6bebddb8cdaaca6f82fdb7630af0f14504a16e66f2316164bd4e17404a79a3d255e6c19a9602995112042398bd53a5fce0fddb0b9c1b4c227bcc594f3c8ace3

    Download Submit

  • C:\Program Files\.exe
    Filesize

    237KB

    MD5

    0e9b28d93627689ad76d55530620d530

    SHA1

    6d16ca54ee041e0d7d3f1fba64ed26de3ec9f821

    SHA256

    ecff142009ccf454b732662e5603dc818effd635b7d82b7f3397757775ccebad

    SHA512

    f6bebddb8cdaaca6f82fdb7630af0f14504a16e66f2316164bd4e17404a79a3d255e6c19a9602995112042398bd53a5fce0fddb0b9c1b4c227bcc594f3c8ace3

    Download Submit

  • \Program Files\.exe
    Filesize

    237KB

    MD5

    0e9b28d93627689ad76d55530620d530

    SHA1

    6d16ca54ee041e0d7d3f1fba64ed26de3ec9f821

    SHA256

    ecff142009ccf454b732662e5603dc818effd635b7d82b7f3397757775ccebad

    SHA512

    f6bebddb8cdaaca6f82fdb7630af0f14504a16e66f2316164bd4e17404a79a3d255e6c19a9602995112042398bd53a5fce0fddb0b9c1b4c227bcc594f3c8ace3

    Download Submit

  • \Program Files\.exe
    Filesize

    237KB

    MD5

    0e9b28d93627689ad76d55530620d530

    SHA1

    6d16ca54ee041e0d7d3f1fba64ed26de3ec9f821

    SHA256

    ecff142009ccf454b732662e5603dc818effd635b7d82b7f3397757775ccebad

    SHA512

    f6bebddb8cdaaca6f82fdb7630af0f14504a16e66f2316164bd4e17404a79a3d255e6c19a9602995112042398bd53a5fce0fddb0b9c1b4c227bcc594f3c8ace3

    Download Submit