Analysis
-
max time kernel
138s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12-10-2023 18:55
General
-
Target
2c3078f95b1684ecaba6fc6d7644cb40_JC.exe
-
Size
105KB
-
MD5
2c3078f95b1684ecaba6fc6d7644cb40
-
SHA1
ed15dc13c6a201dc1f2028049bb259a86ca66bbe
-
SHA256
d4ca68319621714d93690cf3ca780aad582ab25680c1a39bdaded5809d8d0b97
-
SHA512
ff69be3292868af8f9f7e97b1ebbc7a4a2f251f8fda04c01aafe6ef81dca5889f80134112319cd35183888e9d9356083a2404e531f97707efe3e331c51542050
-
SSDEEP
1536:Rxn14xy3xB+huM1vfvgQ/hi16WFWUJCUyh5oMiBmsVpmQctPrbbW1iTt6DtW9YH:R/YyBz+vfo2IEO5JCUm3iB8ttPL2pW9i
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c3078f95b1684ecaba6fc6d7644cb40_JC.exe"C:\Users\Admin\AppData\Local\Temp\2c3078f95b1684ecaba6fc6d7644cb40_JC.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2c3078f95b1684ecaba6fc6d7644cb40_JC.exeC:\Users\Admin\AppData\Local\Temp\2c3078f95b1684ecaba6fc6d7644cb40_JC.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
105KB
MD508aa34ec24b77acecb3f9d41314a1fe1
SHA125b6767c688f5b36cb4f23d0348c38cf8f4cca39
SHA256b7155f3c808a6ef2451a0c3cde91ddd0734c73692d8da2f8ebe92b28043137a2
SHA5123f7a02d2c30c4e939641d6d676467193b04911887bd590d037c101049dc2f9fa87b661d1c9087361265a6d59d5c4e60f954c7f22e5d46b4ab39ffddb37795d60
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB