Analysis
-
max time kernel
1794s -
max time network
1175s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
02-04-2024 18:02
General
-
Target
JIGUtility_V2.0.8.0_20230112/JIGUtility_V2.0.8.0.exe
-
Size
9.4MB
-
MD5
3c41b25f4048eb64bc885cc08aaee53f
-
SHA1
a57295bb0e78ae6a3ddddd6efb30e82cc8c14df4
-
SHA256
1288b83462626e8f2ec920ca3ad059defdccd449e59003642b227efb632a40f7
-
SHA512
3532848d0e4a731bd9cc37579a66fcd5d408e4867ebc2ac12caa68a8774fdacba62f2c218729b5ce7af7c76089056bdd5c2a9d858b0738a957684e447b095274
-
SSDEEP
196608:4jLXJELbAynJwbXvGFLOyomFHKnPkuSE+ok0:4HJ2wbXeFPED
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Checks SCSI registry key(s) 3 TTPs 2 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JIGUtility_V2.0.8.0_20230112\JIGUtility_V2.0.8.0.exe"C:\Users\Admin\AppData\Local\Temp\JIGUtility_V2.0.8.0_20230112\JIGUtility_V2.0.8.0.exe"1⤵
- Loads dropped DLL
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
534KB
MD50c2ba7dd154b4b978993326f3fbb1ed5
SHA1b60574dbf26b7d93dbdd06a43120b83ce7d80f71
SHA256783d2c0b3392f8d14ef7d32b27827adfb0c4310b6fc73dbf50def4effbec351d
SHA512aa031204cfd09d11f6a6c2bb5f65de3f432bd37d20a3f7c7e3dca81ba25a0ed9b0c521c622529a79e798e45fc324ce6221e67a643babcd76be68681dfc706c40