Resubmissions
12-01-2025 13:59
250112-ran7waxpaj 1012-01-2025 13:48
250112-q38asavke1 1012-01-2025 13:44
250112-q114paxlan 1012-01-2025 13:37
250112-qw2jnaxjcl 10Analysis
-
max time kernel
133s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
12-01-2025 13:37
General
-
Target
AxoPac/x64/bin/javacpl.exe
-
Size
68KB
-
MD5
c2a59c7343d370bc57765896490331e5
-
SHA1
a50af979e08a65eb370763a7f70cdb0e179d705d
-
SHA256
40614fe8b91e01ad3562102e440bdbf5fac5d9f7292c6b16a58f723bfffe6066
-
SHA512
ca266f1b2e51f66d119e2d71e3377c229a3d583853ffb606c101afeb41689ace7d1f1594781091da67f9be9d09f3019bf048c0f819777e8f1827a56beec252c4
-
SSDEEP
768:jFVfr2k521ZnrawwMmqPXt+rP3b/9/YMCxx0OpPOrEE14EVHLAuDeGJiqrmehiV9:PxioMmqF+2x0MORLVq7qjh3rmKPNpwGg
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\javacpl.exe"C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\javacpl.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\javaw.exe"C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\javaw.exe" -Xbootclasspath/a:"C:\Users\Admin\AppData\Local\Temp\AxoPac\x64\bin\..\lib\deploy.jar" -Djava.locale.providers=HOST,JRE,SPI -Duser.home="C:\Users\Admin" com.sun.deploy.panel.ControlPanel2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD53bb8e0bb0efa65bb5a41dd031f1483c5
SHA1bb58ed3a46c2e851c1c640b03b5acd721a8ab219
SHA25673d8b83a8b95aa363b087a84904d881e23f7d919013c3f60113f07d787fc4b46
SHA5124c115723b8259a41b03c7a5dc69f44731023b17ca7a8ea7d5de5c5f3092807c3457a0ae41bfa9366eb021f424be8b7ea363cd8c83d002db0cadc652323b26a2b
-
Filesize
1KB
MD5f8987cbf700815b025067be369a8642f
SHA1f4b08c77e138e00d1cfb833781bba343f8d370d9
SHA256e7fcd9097e8e96e427fc024babc8602a9c3125a28c3f0cda1672133cc468d0be
SHA512f70da75cf4ce3931332f5a7c51b6185c97e4f7ed48a954d8b54ec22e5796b8fa9a5078a601314effac0735bd068a6dc0bb6b19afc6dc2e94afaa71194ddc8edb
-
Filesize
12KB
MD5a66e19c05f3e0b24ac077a37c2b7589e
SHA18b9ad1517985c48c0bd11670fabd3648bac9d1ff
SHA2569771364d53fa9b1bd14cef7e48be1f5df23b11aac9f5cb6763a4934b3190e126
SHA5120876a0072ac19f03818a2e5d77cec638470a09e40cd3794d901f1625c3f701f7b37a5cc6e23057a53e62d6e936f5c90bdd4a2c811c64dcfaa20dca5fdf63565f
-
Filesize
160KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
160KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB