Analysis

  • max time kernel
    137s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-08-2024 03:27

General

  • Target

    JigsawBeachHoliday.exe

  • Size

    2.0MB

  • MD5

    6db593956cd4b1465c3bd3055e90820f

  • SHA1

    016a333ffcdf75e742bc0ea05c4d41be3e96ba56

  • SHA256

    c9d7823fb78db5a1918162470529ea55cae6590d2433a7872774954896b0406d

  • SHA512

    27c1a0d7e3c917a55451dda77eff2ac0b88c335a5c026359636cf58384c8686a9c1e2d5660a67d4929f958162bc2c90d6b30685bf65bee85f9cc4d49ce3f9724

  • SSDEEP

    24576:vSN03yz922LQa65Pis/DQ223qAvSfFg3tqzjMGrUFxj/zvfWRA//FjisdzkWGB9:40iz9Wa+6sbQ26qA4YWILj/4V9

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JigsawBeachHoliday.exe
    "C:\Users\Admin\AppData\Local\Temp\JigsawBeachHoliday.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:4560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4560-0-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-1-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-9-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-12-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-11-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-10-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-13-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-15-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-14-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB

  • memory/4560-17-0x0000000000400000-0x00000000009D9000-memory.dmp

    Filesize

    5.8MB