Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 10:47

General

  • Target

    485246b411ef5ea9e903397a5490d106946a8323aaf79e6041bdf94763a0c028.exe

  • Size

    1.1MB

  • MD5

    8a7ed15dfd5e385b3913129c372cc026

  • SHA1

    ff172a51c13c1a3be7f2c8b1e9352492e2ee01d6

  • SHA256

    485246b411ef5ea9e903397a5490d106946a8323aaf79e6041bdf94763a0c028

  • SHA512

    9f8621babba1917e4907d563f068a39c9db64f908e9e6083a9c8520558090117fdc6159e5af38f44524bdc2eecf4d4e6b9e2bba3053e190322aee18642ffd9a4

  • SSDEEP

    24576:2QLVx+nSmMsWO1ANzhNJutjOuXLmDbbRfh3qacMWOEjzDHLPOCTYZMS98kx9:2u0nSmM9O14hNJWXqPxhSpOELLPOCTMV

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\485246b411ef5ea9e903397a5490d106946a8323aaf79e6041bdf94763a0c028.exe
    "C:\Users\Admin\AppData\Local\Temp\485246b411ef5ea9e903397a5490d106946a8323aaf79e6041bdf94763a0c028.exe"
    1⤵
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    PID:3040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\circlass.inf

    Filesize

    2KB

    MD5

    b1729c1b10b4d5a1372c8ee3691a4bf1

    SHA1

    6798234852c90a3eea03a2d1067663beee36eab3

    SHA256

    c69b3923e49ae8a8940c14d3948e741fce14515aec08855bdbb469df73d5e0ec

    SHA512

    84f6fb008388862cb2fb154fce673fb9f506e0c4e7cdca71d64612a8e1d8d25b044bfbf3ef0d1845dc2ce52e689039ae2a2c47034641e7ecbb18a9cdcc53c379

  • C:\ProgramData\djsdmbtt.jog

    Filesize

    33B

    MD5

    ee0c645ad92b640568730804440db12b

    SHA1

    ce41559af3cad02b863918c09c7bbba456532980

    SHA256

    798f85ae5909db1d2929a45994cf8880467e16cd01223838236e936c425e2e03

    SHA512

    d74b77a535b69883bcf6eb3fd0b8451b0e9e60e485d9daba8f6b371ee97810f22b2d550f2044c0991499b6d37ac37bb0342351b1b3767516c70c4ebd80deb6ef