9d0d985f3f8434d84c9ebe30e46c9faee037f7669d0bbc66b59b1e04ec8f649b

General

Target
Jule-Hack (1).rar
Size 8.0MB
Sample260701-m3x82act3j
SHA256 9d0d985f3f8434d84c9ebe30e46c9faee037f7669d0bbc66b59b1e04ec8f649b
MD5 884cdc1cfa62e398adc33bc6a42585cd
SHA1 e6a1ab886b3a30ca003db0542276e46a7ca7e179
SHA512 1bcdebc38ba406ce218336166deb6e6d0221f0aecaf43cf684ee06ddf461ee4e968bf1c624e175f0f993069b4bd7cbbb683c75e7080d70438af5d36df1d87d2c
SSDEEP 196608:Rbp+k1bAdyGPuXDta8tp7CpEhBfRtAit7BAvENsm:Rbp+WAMG6POpoBjBAvusm
TLSH
T1728633AE7805E031EB763A56D93D62C2B65F3DAF78E93F4420761110E396EB3660434B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Jule-Hack (1).rar
- Size 8.0MB
- SHA256 9d0d985f3f8434d84c9ebe30e46c9faee037f7669d0bbc66b59b1e04ec8f649b
- MD5 884cdc1cfa62e398adc33bc6a42585cd
- SHA1 e6a1ab886b3a30ca003db0542276e46a7ca7e179
- SHA512 1bcdebc38ba406ce218336166deb6e6d0221f0aecaf43cf684ee06ddf461ee4e968bf1c624e175f0f993069b4bd7cbbb683c75e7080d70438af5d36df1d87d2c
- SSDEEP 196608:Rbp+k1bAdyGPuXDta8tp7CpEhBfRtAit7BAvENsm:Rbp+WAMG6POpoBjBAvusm
- TLSH
  T1728633AE7805E031EB763A56D93D62C2B65F3DAF78E93F4420761110E396EB3660434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Jule-Hack/Jule-Hack.exe
- Size 8.1MB
- SHA256 e8751a3aa1b5ce651bca720f7dac35d9000e4d42d882ad1e83cef85f3449e908
- MD5 cb9a933ded81e727db6cf3c2fc1531ff
- SHA1 e3cb64c37ca127de4d441603890fcdb41e1358a0
- SHA512 4c8292f16ab44e66facaf3a1bf8556442b9e5522d4453604b121bfe3165e92789af6afad6b08be90af93f941032df594795ea8ed40ae756aeb7a51510c21e184
- SSDEEP 196608:qSllKf1rPdYbQBVhn/XVXMbPoJduSKT+0dg6:fllSP6bgREg3Vy1
- TLSH
  T1CF86336756A31304D6EA9836C437FDD132B7027A4A43DCB4A9D6BDC03E135E8F706A62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Jule-Hack/configs/safe.cfg
- Size 1KB
- SHA256 f3bcd94af021f317262205cb2c97780147547877d1ee4e7ab51f62def613a9e8
- MD5 3335e47edf684b8c002ca7dde451b0b7
- SHA1 07f160935fbf38ce679e8f56f91412401c05ffaf
- SHA512 fc632fe591b936ad1e32f2ba1cba66540243edfef9e98a126e862ff4dae05c54071b6a6ef346074eac5a487a8e1c52b3cdfac234a97496c0ef2b484ad02c71df
- TLSH
  T1C73147F8822CC8DCD502E158837C1F8128D370CEE1D1AC81FBC952166F879F915DAB44
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6