Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
22/02/2024, 20:14
Behavioral task
behavioral1
Sample
JangaFX EmberGen Enterprise v1.0.4 WIN/Read Me.txt
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
JangaFX EmberGen Enterprise v1.0.4 WIN/Read Me.txt
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
JangaFX EmberGen Enterprise v1.0.4 WIN/crack/EmberGen.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
JangaFX EmberGen Enterprise v1.0.4 WIN/crack/EmberGen.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
out.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
out.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
JangaFX EmberGen Enterprise v1.0.4 WIN/embergen_1_0_4_installer.exe
Resource
win7-20240221-en
General
-
Target
JangaFX EmberGen Enterprise v1.0.4 WIN/crack/EmberGen.exe
-
Size
15.8MB
-
MD5
bb6bd9f09c70acb22ff432a6870fa71a
-
SHA1
5e6c5ad9dd2487fc70c29eb35301004d0accd279
-
SHA256
03f833c81a847366426c6779a3cd27f6d88a65c8cbdb0026f7931dc49ebcbee8
-
SHA512
442739fe138d80b4d178b7eebb989d282de18108518205f1dc1eb90b0e025467b0321799ae9f281a96f0aa938b2d34479814d3ab57146298ae3bc24cef07f0ee
-
SSDEEP
393216:nqpHxeE5taqTk9t60ixAzgu40UirmRAU6zn7G9CVmP9w6:YReE5taqgBiIc0RyRKzn7GUmj
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/4044-0-0x00007FF783FB0000-0x00007FF786807000-memory.dmp upx