Overview

overview

10

Static

static

3

JungLoaderFixed.exe

windows10-2004-x64

10

JungLoaderFixed.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JungLoaderFixed.exe

  • Size

    21.3MB

  • Sample

    240722-zqzbsaxfqb

  • MD5

    7aa4185295ab3f4f896704aed05c0795

  • SHA1

    3ae4ec10990ff35a466328f1bc0e8ece616df3c3

  • SHA256

    cb300f10e391aa185ea9555d9122f91dca8eb2dfb064f14180340f48b83be623

  • SHA512

    997ffd6fae8e72b7ca5c62f7de9a9a2c487580b0fec589d305c485163ff873539baa20c5791c3626403cf824a02ebf458c24e28236eae45a75461d1ba88a9e45

  • SSDEEP

    393216:jVymy1SvjN1GnU7s1/aRUFWYbyemyzgnfpyyxlj3OMddmZceVUJA9OhBI1Hs7:Em+SvZs+sldbzgRhFldmZceX9OP7

Score
10/10
discordratexecutionpersistencepyinstallerratrootkitstealerupx

Malware Config

Targets

    • Target

      JungLoaderFixed.exe

    • Size

      21.3MB

    • MD5

      7aa4185295ab3f4f896704aed05c0795

    • SHA1

      3ae4ec10990ff35a466328f1bc0e8ece616df3c3

    • SHA256

      cb300f10e391aa185ea9555d9122f91dca8eb2dfb064f14180340f48b83be623

    • SHA512

      997ffd6fae8e72b7ca5c62f7de9a9a2c487580b0fec589d305c485163ff873539baa20c5791c3626403cf824a02ebf458c24e28236eae45a75461d1ba88a9e45

    • SSDEEP

      393216:jVymy1SvjN1GnU7s1/aRUFWYbyemyzgnfpyyxlj3OMddmZceVUJA9OhBI1Hs7:Em+SvZs+sldbzgRhFldmZceX9OP7

    Score
    10/10
    discordratexecutionpersistencepyinstallerratrootkitstealerupx

    • Discord RAT

      A RAT written in C# using Discord as a C2.

      stealerrootkitratpersistencediscordrat

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks