Analysis
-
max time kernel
7s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system -
submitted
25/02/2024, 00:01
Static task
static1
Behavioral task
behavioral1
Sample
lova_sosa.zip
Resource
win11-20240221-en
Behavioral task
behavioral2
Sample
JSON.ahk
Resource
win11-20240221-en
Behavioral task
behavioral3
Sample
credits.txt
Resource
win11-20240221-en
Behavioral task
behavioral4
Sample
juke.exe
Resource
win11-20240221-en
Behavioral task
behavioral5
Sample
settings.json
Resource
win11-20240221-en
General
-
Target
juke.exe
-
Size
1.3MB
-
MD5
85aeab884be9b98d77b22d5a1b4c8ec5
-
SHA1
45fc5dae203cedc3886fc957527d4c26c8ec7fc7
-
SHA256
03a957a9f2bebe2e5fc173cf246e1736a72106a688475803aff4614a535f4cda
-
SHA512
75cc1a44143254b10f93892b8f06c5bda22a160dd253655e8b0e1bd585dea126340667b26adcf5c9f287b87cf20d794a9d2c89148e17946d6c1801b89803c309
-
SSDEEP
24576:IdofGAmSIQ177wZ+A7MjiiRDXU/Sat5RgsLSmIOHsU5zMmX1xYwncqKvGqzMSeMU:IdofGbSIQ177wZvYjiiRDXASat5RgsLs
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4212 juke.exe 4212 juke.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4212 juke.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4212 juke.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4212 juke.exe