Overview

overview

10

Static

static

10

Jules (2).exe

windows10-2004-x64

9

Resubmissions

24/09/2024, 04:03 UTC

240924-emv5qstalr 10

22/09/2024, 13:00 UTC

240922-p8n9es1cmh 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Jules (2).exe

  • Size

    76.2MB

  • Sample

    240924-emv5qstalr

  • MD5

    9a9a9de3d1ca9351adaab3c130ac672e

  • SHA1

    ab35e236a214fa35c5178e7617d8b4031e9cdb9a

  • SHA256

    081aa6e92bc9cf6ab43d40356af8a491ff8569f9ebcd192513284b8a8fba2b2a

  • SHA512

    b0df0729347d9c0775d5e45f3d449322c21c8c77ce60e13eb3961f6e5f439820d35d402b24f0dfd4000f2b56392ed90b3d2f00333de7502d1d7a98590c47b608

  • SSDEEP

    1572864:5vhQ6lNW/x7vDSk8IpG7V+VPhqIbE7WTylPj4iY4MHHLeqPNLtDagvZaAme:5vh1fkxPSkB05awIxTy5nMHVLteMlme

Score
10/10
pysilonevasionexecutionpersistencepyinstallerupx

Malware Config

Targets

    • Target

      Jules (2).exe

    • Size

      76.2MB

    • MD5

      9a9a9de3d1ca9351adaab3c130ac672e

    • SHA1

      ab35e236a214fa35c5178e7617d8b4031e9cdb9a

    • SHA256

      081aa6e92bc9cf6ab43d40356af8a491ff8569f9ebcd192513284b8a8fba2b2a

    • SHA512

      b0df0729347d9c0775d5e45f3d449322c21c8c77ce60e13eb3961f6e5f439820d35d402b24f0dfd4000f2b56392ed90b3d2f00333de7502d1d7a98590c47b608

    • SSDEEP

      1572864:5vhQ6lNW/x7vDSk8IpG7V+VPhqIbE7WTylPj4iY4MHHLeqPNLtDagvZaAme:5vh1fkxPSkB05awIxTy5nMHVLteMlme

    Score
    9/10
    evasionexecutionpersistenceupx

    • Enumerates VirtualBox DLL files

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.