Overview
overview
7Static
static
7?????10?/2_p.exe
windows7-x64
1?????10?/2_p.exe
windows10-2004-x64
1?????10?/?????.exe
windows7-x64
7?????10?/?????.exe
windows10-2004-x64
7?????10?/bbxcomm.dll
windows7-x64
1?????10?/bbxcomm.dll
windows10-2004-x64
3?????10?/bbxinput.dll
windows7-x64
7?????10?/bbxinput.dll
windows10-2004-x64
7?????10?/jianpan.exe
windows7-x64
1?????10?/jianpan.exe
windows10-2004-x64
1?????10?/soundbox.dll
windows7-x64
1?????10?/soundbox.dll
windows10-2004-x64
1?????10?/tool.dll
windows7-x64
1?????10?/tool.dll
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 04:39
Behavioral task
behavioral1
Sample
?????10?/2_p.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
?????10?/2_p.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
?????10?/?????.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
?????10?/?????.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
?????10?/bbxcomm.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
?????10?/bbxcomm.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
?????10?/bbxinput.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
?????10?/bbxinput.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
?????10?/jianpan.exe
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
?????10?/jianpan.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
?????10?/soundbox.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
?????10?/soundbox.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
?????10?/tool.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
?????10?/tool.dll
Resource
win10v2004-20240508-en
General
-
Target
?????10?/jianpan.exe
-
Size
1.8MB
-
MD5
f80302788d4410439713794efe43779e
-
SHA1
e9de20c908b0302dd9086b02c587f3535e7feb6d
-
SHA256
bef66045f3b8757a8cc9f67c4439f4a086749061fc7bc713c00e2bc50f755c95
-
SHA512
4ea10b9c170b65b057fedb00f2019478efb60fc33b4c0d6ed93309eede3786f40c0142ac8c821fa9fc4fe9232baf6b905cb5bdeb0feb8033a44adad704fef651
-
SSDEEP
12288:VGVCcb3B3EySK9KIjWKVKKKKmYU6Kv+DOfSyXVHrzYeu5mL2p:YVCYhAvA8vXrLG
Malware Config
Signatures
-
Processes:
jianpan.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main jianpan.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
jianpan.exepid process 1736 jianpan.exe -
Suspicious use of AdjustPrivilegeToken 58 IoCs
Processes:
jianpan.exedescription pid process Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe Token: 33 1736 jianpan.exe Token: SeIncBasePriorityPrivilege 1736 jianpan.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
jianpan.exepid process 1736 jianpan.exe 1736 jianpan.exe 1736 jianpan.exe 1736 jianpan.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1736-2-0x0000000034EB0000-0x0000000034EC0000-memory.dmpFilesize
64KB