c83dd724055bd29def88cf31d8ab99cf3f89bd26ec7a2f8c9f3afd93c3360466

Analysis

max time kernel
5s
max time network
20s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20/04/2024, 02:45

Sharing

Reason

Machine shutdown: "{\"level\":\"info\",\"time\":\"2024-04-20T02:46:01Z\",\"message\":\"Dirty snapshot: /var/lib/sandbox/hatchvm/win10v2004-20240412-en/instance_22-dirty.qcow2\"}"

Report Analysis Logs

General

Target

c83dd724055bd29def88cf31d8ab99cf3f89bd26ec7a2f8c9f3afd93c3360466.exe
Size

245KB
MD5

477f9eb0b9b247fe0e21674b0377b4b9
SHA1

3baa6dee75c994ddbbbc2b90000e52d3865b7f85
SHA256

c83dd724055bd29def88cf31d8ab99cf3f89bd26ec7a2f8c9f3afd93c3360466
SHA512

cd9b8ec32b7469b49815442232632e190a9bfbc900d3db9c204a4190ac3a98a3c80ed5e36c48074aee63415dae64889854d39c82950cfe89a21e28bf8e1366c3
SSDEEP

3072:qdJNz8NQQJsQdYCpB4sL/CzrtXlS41sBL5RhL8dVsA8iQPWp5:CVaKqptqftX041ECVEa5

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
2824	hqjdank.exe

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\PROGRA~3\Mozilla\hqjdank.exe	c83dd724055bd29def88cf31d8ab99cf3f89bd26ec7a2f8c9f3afd93c3360466.exe

C:\Users\Admin\AppData\Local\Temp\c83dd724055bd29def88cf31d8ab99cf3f89bd26ec7a2f8c9f3afd93c3360466.exe
"C:\Users\Admin\AppData\Local\Temp\c83dd724055bd29def88cf31d8ab99cf3f89bd26ec7a2f8c9f3afd93c3360466.exe"
1⤵
- Drops file in Program Files directory
PID:4856

C:\PROGRA~3\Mozilla\hqjdank.exe
C:\PROGRA~3\Mozilla\hqjdank.exe -gzmenpj
1⤵
- Executes dropped EXE
PID:2824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Mozilla\hqjdank.exe

Filesize
245KB

MD5
61d707448186349916f7f0a3c1921cb7

SHA1
5758e63e4625bb37f5fb6e40b5a6a732da082baf

SHA256
19c62248d4be3fbac1f1370d2dcb55553a474f369d11a4c029b3bd97864f7e1f

SHA512
ae9121d327736df1308dc532937846ad2f03309282a7717ba52810498c64c0632217c38a9ea28be6c6ccbac0e4211aa53f7f50f01cbda8a61577f880cf97b911

Download Submit
memory/4856-0-0x00000000020C0000-0x000000000211B000-memory.dmp

Filesize
364KB

Download
memory/4856-1-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/4856-5-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download