Analysis
-
max time kernel
162s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
13-10-2023 21:34
General
-
Target
9ca53afc226509ab5c17f883b2ec241126fc95b131910c4202a2c5b084336fa7_JC.exe
-
Size
197KB
-
MD5
3a2a650e38e091c0f21e8fb091e60451
-
SHA1
284cf3e757a82b0feb43ad691a1efbfde7171193
-
SHA256
9ca53afc226509ab5c17f883b2ec241126fc95b131910c4202a2c5b084336fa7
-
SHA512
4d8fb291c9518f67dad7582898d55830933e04204fc622a9df326af572eb58fdefdb8bf42906d95f8173fd47af4f6eb35e2866555db9a320ee9b86365aba324a
-
SSDEEP
3072:bvDSLXr5TXHwa5yak5qVmnBczE2QwWgxp9f45K6cLTfN49Q:XSL7Nga5yXdBSEbpgxzHHLTV4i
Score
10/10
Malware Config
Extracted
Family
tofsee
C2
vanaheim.cn
jotunheim.name
Signatures
-
Tofsee
Backdoor/botnet which carries out malicious activities based on commands from a C2 server.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9ca53afc226509ab5c17f883b2ec241126fc95b131910c4202a2c5b084336fa7_JC.exe"C:\Users\Admin\AppData\Local\Temp\9ca53afc226509ab5c17f883b2ec241126fc95b131910c4202a2c5b084336fa7_JC.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
-
Filesize
76KB
-
Filesize
512KB
-
Filesize
84KB
-
Filesize
76KB
-
Filesize
512KB
-
Filesize
512KB