Analysis
-
max time kernel
140s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
29/09/2024, 09:54
General
-
Target
jpdesk.exe
-
Size
903KB
-
MD5
62acbd2883956a26821d5f602fbe4ebb
-
SHA1
c906c459a0136a4eb8777a9c1aef49c2adbf700f
-
SHA256
4e436e97d7aa73e1c82cb32c25964d71ca8f4c2aac701783215334948e795328
-
SHA512
8e386323b7d35f9955a4cb604abe9cff3df83a7ddad40e57fbaa3acac9ef0e2bd3bcaec0518e0a59cde420ad8a6d0b1e9432b095c2ebe26d531c2807d964a32a
-
SSDEEP
24576:hoAXT+u1NglW1ScKc1FnXJJl/+KhI97Nimo6rmfa6z/AH44J:hH6uGW1SUSNw6rmfa6/4J
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\jpdesk.exe"C:\Users\Admin\AppData\Local\Temp\jpdesk.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD509c7ca120d653513cff0e68bd1cfe44f
SHA1852a166c1ff59ecf74a7ebd24a43bd5b2f9835d7
SHA25663f92cdceaaad357263ee065baf511b60f5ec80caa9d34404162be3503953b4f
SHA5127f0c64d483f27bd176b9f47ce659ff19ceb1c53e79cbd55b0f2aa83c8634e8f2ed05c2f903d78e7049d92aeb419f8a5f47c5e1fe5c8e08adfed103ff299447db
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB