Analysis
-
max time kernel
117s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12-10-2023 15:47
General
-
Target
68aa3e720e8acf3cbd64f4046d067c50e53426ad0a2e738d08618c7aff116073_JC.exe
-
Size
6.0MB
-
MD5
034dfb2a7a6be34ff4c197c3f5158c4e
-
SHA1
f7805977f7cef6bd9b6fccf0f0a144626a838fde
-
SHA256
68aa3e720e8acf3cbd64f4046d067c50e53426ad0a2e738d08618c7aff116073
-
SHA512
73d5b8f20f26573a19f7d202828a7401ab654c14361e05f2020d3ef3b0b09276546b9f3c72756ea6a4d81a08a7608d0c07b47f3ac767dafeeb133105d8488081
-
SSDEEP
98304:sB6Xdvo120oIeVsHteuyK8mCpq3wdqVAYUzujDG:pC8VFTd4AoVAYUzT
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\68aa3e720e8acf3cbd64f4046d067c50e53426ad0a2e738d08618c7aff116073_JC.exe"C:\Users\Admin\AppData\Local\Temp\68aa3e720e8acf3cbd64f4046d067c50e53426ad0a2e738d08618c7aff116073_JC.exe"1⤵
- Adds Run key to start application
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.5MB
-
Filesize
8KB
-
Filesize
9.5MB
-
Filesize
8KB
-
Filesize
1.7MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
9.5MB
-
Filesize
1.7MB