Analysis
-
max time kernel
133s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
03-07-2024 09:48
General
-
Target
jsxs_link.exe
-
Size
992KB
-
MD5
c653fe45c04790f216ff3cbf69cfecc2
-
SHA1
9529a07611d3ccb7b4e2349c4bde1c0406f3fabe
-
SHA256
7a9e08bf3db90667c290af22eb0b3c9a2e92e631ab027eb6a3b3bfcb50ef3a59
-
SHA512
13336066b555971441aafc709ee5f0de521bccc7efc939d5dbe9c8828af750957777eadac406668fabd947342ffa1032e931103cffe3b40ed19f34174b0f562b
-
SSDEEP
12288:JieuLnEFU2NtmLz4GXAArUgbvJynoMb2CMmLgo9M/SMZoSzERPO0FD:JieYoGEGQALvi2o9TMgT
Score
7/10
Malware Config
Signatures
-
UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jsxs_link.exe"C:\Users\Admin\AppData\Local\Temp\jsxs_link.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1580 -s 17642⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1580 -s 17882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1580 -ip 15801⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 1580 -ip 15801⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB