General

  • Target

    Jules (2).zip

  • Size

    58.5MB

  • Sample

    240911-w1brpavgqm

  • MD5

    00154e66f9114f2e323f7b8ed8207409

  • SHA1

    5613a98dd2fc2c781cb1cc372ac0e179c68dbb39

  • SHA256

    567d2583803142401ff749e5a6544ecbdcf1c6974610d454bd080ca749626d3e

  • SHA512

    dc4f4166c5534840083c3f9a760007757858ddc1565e4a37b2e468972fa047ca6621877ee059dc9f54f39d1bffacd646720eb056714f55b928afa646de4d9fc6

  • SSDEEP

    1572864:yJTGlvNbeB0uXci0nZFJJ2XBeYiGwoUj3lPykrPUTxk:yJTGlvNCBNchFJJSQFoUblRrPaxk

Malware Config

Targets

    • Target

      Jules (2).zip

    • Size

      58.5MB

    • MD5

      00154e66f9114f2e323f7b8ed8207409

    • SHA1

      5613a98dd2fc2c781cb1cc372ac0e179c68dbb39

    • SHA256

      567d2583803142401ff749e5a6544ecbdcf1c6974610d454bd080ca749626d3e

    • SHA512

      dc4f4166c5534840083c3f9a760007757858ddc1565e4a37b2e468972fa047ca6621877ee059dc9f54f39d1bffacd646720eb056714f55b928afa646de4d9fc6

    • SSDEEP

      1572864:yJTGlvNbeB0uXci0nZFJJ2XBeYiGwoUj3lPykrPUTxk:yJTGlvNCBNchFJJSQFoUblRrPaxk

    Score
    1/10
    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/folding/folding.css

    • Size

      1KB

    • MD5

      36bd38f90b3e4d47fa72e5def464d11e

    • SHA1

      0a54f86f80ea14a19490f29b569a5ba8cc853bb6

    • SHA256

      952887e7529d8b0f6f00ef99245b5d942498b38e6d722aa3e85ec41cc61a19ff

    • SHA512

      4402db50f6bab004df8bf4c42b606dd34771b8971e02ba06fd0492392765880e20c49efd009291d94247b109077db6d43fb71a59fc51bc82c087c2cbbe59db26

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/gotoError/media/gotoErrorWidget.css

    • Size

      1KB

    • MD5

      9b3b47bf70887b123c612bb659c15cc5

    • SHA1

      b1b0f0b74fd0e29a6175f7bc9767f751f7847e67

    • SHA256

      af627c208f66e7a03060f6af7d68e124f3fc31d69a16416a4d26d893a68a1682

    • SHA512

      b38dfeb2850656ae2f53dfbcf8240d7c9fae880f724c53bc6ff1fe61df3b654ad73f5118c1d2eedd05c7ce19909b334210fe3fa5dcad94667c08928dad83f08f

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/gotoSymbol/link/goToDefinitionAtPosition.css

    • Size

      448B

    • MD5

      4acd1d71543b14c3f0df0088bce0ff79

    • SHA1

      23c9c52525a1a9c96e07025b7f4afd018d49a5d4

    • SHA256

      4c8328ea1e5e344a1b5b0caeb89a5b1652eef6493dac5edf37b2f40e3752630d

    • SHA512

      87aec2095a982dd8eb94515f5434b9610b1bec2456b70cdfff57a666802beeb8618c5e557b9a19d1d7a1cec8ceae5a6d9b735602f9908a4e10286fa4601f68f7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/gotoSymbol/peek/referencesWidget.css

    • Size

      1KB

    • MD5

      4ccf9347da289de49b41628b9439735c

    • SHA1

      cfe352c1465ceaf1ab0bc5a34167c9ae3c3e16e2

    • SHA256

      862dd6285bcf089e66a829d831b75785ce6b3d2dfc8c695f76a077b59339533c

    • SHA512

      72277f03bd721063de6410dd1e2748e29e90fd6705fb6f9bc87f8e40fd5d0efb7c3d75a214fb49e4e833bce4e9b14eb6221414f3506f606ff7aa6ddb381036b3

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/links/links.css

    • Size

      559B

    • MD5

      bd1f59595a326c329fba541cac3b1fe6

    • SHA1

      1ec3910d84b9766022e988ed062f3853b7f4e06f

    • SHA256

      5407b8a20344cd67547d7f69c009b2624159e980e4160d005e4373043ba04b5c

    • SHA512

      9c62c32868811cd92dd1d1d790089c0bc4f380b8b30f3d71f576a0f70b0b0c92de186a8f2070c76d7debca7aa25afb9657671e62d118b65356b8cade781340c9

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/message/messageController.css

    • Size

      1KB

    • MD5

      d323660d8c213a9b9da0f945ee4f69ec

    • SHA1

      f01d088d4a5c44d3f4d95ba9217f35c37f5052f1

    • SHA256

      08cd809821857f05946095e4a0b13a7e5b3962815585442c4f81d477c14d5c6a

    • SHA512

      b9b71eb3a3b550a5403e9af3f75b25c83979377b84be78e49f6175da59e28b33418978ad0a5f21919c93861d91e71b06434c30a6968640861f963a07f3888cf2

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/parameterHints/parameterHints.css

    • Size

      2KB

    • MD5

      7365146bbeae5982a06a86c018493e94

    • SHA1

      44caf71e2357c25c990767d301dba36178e7be4f

    • SHA256

      c2efbdcbe9c72e1c4953a68bed1946158a4f959109d06dc8b32de17ca77c3be1

    • SHA512

      b1d95e3d8b38efdbcb1b941f1e42adefb9bff3125c43652c5f51d4135abf2082c5324349d0eb3575a69437f58ec5e90863be0fb34f990032f1f63d0893dc3789

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/peekView/media/peekViewWidget.css

    • Size

      2KB

    • MD5

      331896a743bc05d23adfc6557687d8f7

    • SHA1

      a0085fd9bee79d48aee2eb6338b6e0f6676600d5

    • SHA256

      f60e6934b275600030fcc7e8364572df5733fe00032d8ec3bc13c9f0d0932697

    • SHA512

      f278146af6cca2254511115eafa77ab61f8372c09b924ed804a78820686b410c1de5e95b1722846e92dae2fd51b2dbb431c0d693af0eca471e00ba71417ac464

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/rename/renameInputField.css

    • Size

      744B

    • MD5

      6ee33c5b8fcebbcf31ebac1e983cfbd7

    • SHA1

      a0502334bbd8d45aaac8b0de16e4afeb2bb51df4

    • SHA256

      b8b61785b67ab6abcc473e68fba35a92ed015f806e9ecea34fcd72e8511e9938

    • SHA512

      529d69d00c1472701133163397f1972df513e2d4504cb96d54a55c9cf0b1e87909d3c80230fccf0640bec7e8a684df9bd3d1d9b7c5da1205f1a0c29da4bc8ab1

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/snippet/snippetSession.css

    • Size

      561B

    • MD5

      3e3fdc1d0685be3b068d2b09da05298a

    • SHA1

      407b0524850492eefd9041884305812863da9a62

    • SHA256

      c9939da092af0e32aae7f264bb2b00b03f572fc1f880fe18ff6e6105a34316aa

    • SHA512

      55a0da7949539539bf1c409288f51c802da1088bcd5bb13ead693ffdddecafac5bf8b48c39255e7a73dca1da124e09e8d699c950ddae28266bf6e3c2c4d692f7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/suggest/media/suggest.css

    • Size

      11KB

    • MD5

      3e6c9a8eb9f5c0d48ac835c42cc78b2a

    • SHA1

      49834e312e82d4c20414a079147f0d9028308537

    • SHA256

      7305b13a66a3c1a2edf3656c5f72081245c1b81d0f2de315b41016b5879eaa7f

    • SHA512

      f16c75fa2904dc5ca26a1cc643b8cd29f402f7e6b4f7fe90aa3a97f8edb65f3f747d78312175062dbdffc37d03692da725bbcfdfff270994e20437781e1ac2d4

    • SSDEEP

      192:JdvZdqZg9R8ntQxRGxF/g8wj8JG8zgC8NFJ18Y8DG8iOZwRUMu8Kmi8ZVqG8W8Ox:nRTsuVVq9qSc98e

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/contrib/zoneWidget/zoneWidget.css

    • Size

      616B

    • MD5

      efb5a7a704db1f73259e42eea9aed38c

    • SHA1

      cca017045052d7055d03e080731b1b227410e94a

    • SHA256

      bf5be72d0135b320c34bb2d4ddec197671c7974c8ab93140eee88bca93035c1f

    • SHA512

      8a7e7e9ce0d76a2f60238142c9d2010d63e89446d698fb0afefde0eb53886a871817c18bd4a038f48dfb039ab43aad3e726be03a5472df61b4057e93356a985a

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/editor.api.d.ts

    • Size

      252KB

    • MD5

      514de49294c90b52399e017846b759e3

    • SHA1

      59072b89b644cd814b508f3415f8529a80ef8e50

    • SHA256

      712e6f0edb860883f4709eaf540ba688591c47881dc04b210162b62a779ddb54

    • SHA512

      2655a75590f3653492013fd0e4533c8f85a2a4d86fd22df3dd14b285a7304296b72daf3bd3ce1eda3b9b274cde129569c3ddb94ef380353da979453ab3e8c6b4

    • SSDEEP

      6144:nus6TlimttCyT/7oyCSoTM0BDMW0MtDVvZSqD2SzI4Wpv6+gZfPaj/P5bYwg6m85:nF6TliKCyT/7oyCSoTM0BDMW0MtDVvZO

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      Jules/Monaco/package/esm/vs/editor/standalone/browser/accessibilityHelp/accessibilityHelp.css

    • Size

      465B

    • MD5

      2c6a0e75248e786086862e615b3d42bc

    • SHA1

      d5df437eac2c35d5b0a9d0a9591c25afa0c5a835

    • SHA256

      4b9adb6311b8b03d944fd2ca9424f7afbd13a40da2e2e28e6cf3af8c9fddb593

    • SHA512

      a1de4ae38205c75b9241fb21306e173536e64de3a2932f61880bb1ce3793e803a98a76e5b2e343b79d9d41160772ed227a2f25f06f7ab54baf0d58222e3b2f9f

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Jules/Monaco/package/esm/vs/editor/standalone/browser/iPadShowKeyboard/iPadShowKeyboard.css

    • Size

      3KB

    • MD5

      96ce4351eb6107b6ab1b27932850262d

    • SHA1

      665ec553f6ac564b4b0c18e0327508d3f764919d

    • SHA256

      3769b2499593cca78b90e0837c72d7f920f689ee494eb982ec7b25a833593dc3

    • SHA512

      21b21b0aee38dec996371fd85e06b350e7a94875f3ff96c5b80780c963dac2ab5da072d534ea0cc4fadb2e86e3dfed4e6562c13db25483f1ea13b97e8ae7d085

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks

static1

pyinstalleragenttesla
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
3/10

behavioral4

Score
7/10

behavioral5

Score
3/10

behavioral6

Score
7/10

behavioral7

Score
3/10

behavioral8

Score
7/10

behavioral9

Score
3/10

behavioral10

Score
7/10

behavioral11

Score
3/10

behavioral12

Score
7/10

behavioral13

Score
3/10

behavioral14

Score
7/10

behavioral15

Score
3/10

behavioral16

Score
7/10

behavioral17

Score
3/10

behavioral18

Score
7/10

behavioral19

Score
3/10

behavioral20

Score
7/10

behavioral21

Score
3/10

behavioral22

Score
7/10

behavioral23

Score
3/10

behavioral24

Score
7/10

behavioral25

Score
3/10

behavioral26

Score
7/10

behavioral27

Score
1/10

behavioral28

discovery
Score
6/10

behavioral29

Score
3/10

behavioral30

Score
7/10

behavioral31

Score
3/10

behavioral32

Score
7/10