Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
17-07-2023 16:17
General
-
Target
965c5523f3d8ed_JC.exe
-
Size
428KB
-
MD5
965c5523f3d8ed5b9de89c7b8fcf7c9d
-
SHA1
1da65ced1c9a1e733043b552d3f46a7ad435bfe1
-
SHA256
fbef8b47d8fa0b3951678531f06d88210de708cf5f99c428a6dacdff058f1449
-
SHA512
55d582611201ad3f8600ff2ef13001ff98bef60236e20b96d3954a089791502bd7cc8baf8cc924351b01aa9425301751ae7a4beb54698e1f11b299cc4a20e55b
-
SSDEEP
12288:Z594+AcL4tBekiuKzEr/jB7TAdxj+3LbAOlLKPeAdFs5l:BL4tBekiuVr7R40gO0mAdw
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\965c5523f3d8ed_JC.exe"C:\Users\Admin\AppData\Local\Temp\965c5523f3d8ed_JC.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7C61.tmp"C:\Users\Admin\AppData\Local\Temp\7C61.tmp" --helpC:\Users\Admin\AppData\Local\Temp\965c5523f3d8ed_JC.exe B09DDD5F0D2C2B0BB387E67D1699DD0C08EEFFF05C697EC1BF46329376F858725C5C351CC2FA02C0568C951733A4ED886A17237625234715964F5FC290D73E9D2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD5a7ff96b8330b0526a9bdb0110c2fce20
SHA15479b5f8f958d31bbb40fb73c7c6e30148948e36
SHA2567c895657980538549cf1487c6d50a57f746ae3a005466ed70375d7c6b55be949
SHA51213d148ff5ba33c59bd269d4f8436e668a056f6dfd94d8de4403cd225ac6cffda04f424101556d51a27a21b35943ee4348dda2d4de17a05fc38235f27e11539ef
-
Filesize
428KB
MD5a7ff96b8330b0526a9bdb0110c2fce20
SHA15479b5f8f958d31bbb40fb73c7c6e30148948e36
SHA2567c895657980538549cf1487c6d50a57f746ae3a005466ed70375d7c6b55be949
SHA51213d148ff5ba33c59bd269d4f8436e668a056f6dfd94d8de4403cd225ac6cffda04f424101556d51a27a21b35943ee4348dda2d4de17a05fc38235f27e11539ef