19143ce045042399b205cb5637ab715051a2ab0cc1b668b21e9c05103781ff8d

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
17-09-2023 17:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
Size

248KB
MD5

b8d6b3dacdce9c218d3d1ff1debdb66b
SHA1

e9f835957c06020eb5e4c565f566628eab05b713
SHA256

19143ce045042399b205cb5637ab715051a2ab0cc1b668b21e9c05103781ff8d
SHA512

fac2b0c9f1a16f39859c9cdcea1b20d5bd27fa2937e0d76346c78a28616ae5dc690a0091a3ff320a06060ab8b9ec0f0bd63933aa629cc7c6eea6a73375a6b527
SSDEEP

1536:W7ZhA7pApaX0aX09rDVMFDwU5LenTpnDr5LenTpnDRSfuYauo:6e7WpGlCK0o

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_kor.xml.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_es.properties.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Microsoft Office\root\Integration\C2RManifest.dcfmui.msi.16.en-us.xml.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_zh_CN.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\System\msadc\es-ES\msdaremr.dll.mui.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\include\jni.h.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\meta-index.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-nodes.xml.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_zh_CN.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue II.xml.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\es-ES\InputPersonalization.exe.mui.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7Handle.png.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_zh_CN.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-oql.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\7-Zip\Lang\mng.txt.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipRes.dll.mui.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\splash.gif.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr\default.jfc.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_zh_CN.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_zh_CN.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.vi-vn.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sr.pak.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\jre\bin\j2pkcs11.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\7-Zip\Lang\io.txt.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\tipresx.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\System\ado\msadrh15.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkClientCP.bat.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pt-br.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_ja.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jre1.8.0_66\lib\ext\jaccess.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_zh_4.4.0.v20140623020002.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-masterfs-nio2.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.properties.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.common_5.5.0.165303.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_zh_4.4.0.v20140623020002.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-nodes.xml.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\7-Zip\Lang\ky.txt.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\tabskb.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\libEGL.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\license.html.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\7-Zip\Lang\an.txt.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightDemiItalic.ttf.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui_5.5.0.165303.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_zh_CN.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_globalstyle.css.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jre1.8.0_66\COPYRIGHT.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\bin\msvcr100.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\db\lib\derby.war.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.configuration_5.5.0.165303.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Java\jre1.8.0_66\bin\fxplugins.dll.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\7-Zip\Lang\en.ttt.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
File created	C:\Program Files\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui.tmp	b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe

C:\Users\Admin\AppData\Local\Temp\b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe
"C:\Users\Admin\AppData\Local\Temp\b8d6b3dacdce9c218d3d1ff1debdb66b_JC.exe"
1⤵
- Drops file in Program Files directory
PID:312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2344688013-2965468717-2034126-1000\desktop.ini.tmp

Filesize
248KB

MD5
3d5a342ff4d74f9831be114b5fae76ee

SHA1
ef3bf456303b75c5f5564abdd8827f7a921f8437

SHA256
3d2d22fc630bee21521b02fcec6b22e2b37f7b990f9842526eb7b71afd8f0460

SHA512
ab3c52e936b1c2480843a69a03c9997b49d6205c175f240b36d89a366da6ad09f232bf058d5ee06a69c9c6e7ab7fdb6a54f74413efb98873d21402139232446b

Download Submit
C:\odt\config.xml.tmp

Filesize
249KB

MD5
5bbaf43b5892b4ff537c1cb80ea808fb

SHA1
216583c45167b748aff115fcbd1e4571bfbf4804

SHA256
7dc3fbe8614f5e93852570cc3317df4e0542af38f16658f94125fa75963a17a3

SHA512
d514310a5829a34593b8274e45fc3841c3b7086244839a4dac02e4ae7c4e3f3c28927ffd7c6aa5e9f406a7492ff9b6f633babdede909550fd3fdba84575d57c9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads