Analysis
-
max time kernel
140s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
16-08-2024 06:25
General
-
Target
Juisreader.exe
-
Size
245KB
-
MD5
3bbf4e0b78fd24afaac4bf671d532450
-
SHA1
d886fa410702a53a08d1603b74f9711ca97a8ce4
-
SHA256
421b9f57ff0de8d193d1426552e5abaf90f5da54115da8cd228e0ad573dfa36c
-
SHA512
7b1ebaa2fbcc0c6e819342bef5332eecd167e2b71a757ff0788637114f47ce31124be823a8747375821e086fce620537431a019baf2d803237c475be94d00e9b
-
SSDEEP
6144:p1kpobhDnyPca7TJjG0ARL6Z9jyOruAa2JC8/AQoPScK1w/U4:pmWhWPcOj/k6yic8KPScr
Score
10/10
Malware Config
Signatures
-
Detects Strela Stealer payload 15 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Juisreader.exe"C:\Users\Admin\AppData\Local\Temp\Juisreader.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
676KB