Новая сжатая ZIP-папка.zip
- SHA256 5a613282f0ddf7b1afcd0a49697d6cafd9acb6e43d7e76e7c495f3016e2b4164
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Новая сжатая ZIP-папка.zip
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Jule-Hack/Jule-Hack.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
Jule-Hack/configs/safe.cfg
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
General
- Target Новая сжатая ZIP-папка.zip
- Size 8.0MB
- Sample260701-m6e7mact5k
- SHA256 5a613282f0ddf7b1afcd0a49697d6cafd9acb6e43d7e76e7c495f3016e2b4164
- MD5 9b49733cace75e061cfed6c725a07b5a
- SHA1 ff44caf216f3641df9b54ac1383b661d0dbe8256
- SHA512 b9c7293bc5b3b6f8f8c8e354c65ccd4d6f0afeffadaa6d1555df491ae75a62b2ffbc4b5162235631c30c30721c767d9caa0ebcd4ded120c6114614fff1c932e4
- SSDEEP 196608:1fzQ/f7l1v0XcbNBV5ohrAOwERykuvqUqv8:1fC1MX0kMdW3IH
- TLSH T13A8633938DE2845DFA8A38E4794CD2A6174B054E604FCBA5F823D8249F3297D7F3D906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Jule-Hack/Jule-Hack.exe
File Explorer
-
Новая сжатая ZIP-папка.zip.zip 8.0MB
-
Jule-Hack/Jule-Hack.exe.exe 8.1MB
-
Jule-Hack/configs/safe.cfg1KB
Jule-Hack/Jule-Hack.exe
- IMPHASH 4c9c16166ac7e184c8b1e38e653aab24
- SHA256 e8751a3aa1b5ce651bca720f7dac35d9000e4d42d882ad1e83cef85f3449e908
- MD5 cb9a933ded81e727db6cf3c2fc1531ff
- SHA1 e3cb64c37ca127de4d441603890fcdb41e1358a0
- SHA512 4c8292f16ab44e66facaf3a1bf8556442b9e5522d4453604b121bfe3165e92789af6afad6b08be90af93f941032df594795ea8ed40ae756aeb7a51510c21e184
- SSDEEP 196608:qSllKf1rPdYbQBVhn/XVXMbPoJduSKT+0dg6:fllSP6bgREg3Vy1
- TLSH T1CF86336756A31304D6EA9836C437FDD132B7027A4A43DCB4A9D6BDC03E135E8F706A62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
17336800
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
dwmapi
DwmExtendFrameIntoClientArea
ws2_32
bind
crypt32
CertFindCertificateInStore
advapi32
CopySid
ntdll
VerSetConditionMask
kernel32
WriteProcessMemory
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetKeyState
CharUpperBuffW
shell32
ShellExecuteA
msvcp140
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
userenv
UnloadUserProfile
bcrypt
BCryptGenRandom
rpcrt4
RpcStringFreeA
urlmon
URLDownloadToFileA
winhttp
WinHttpConnect
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_47
D3DCompile
imm32
ImmSetCompositionWindow
vcruntime140
__current_exception
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
fread
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-filesystem-l1-1-0
_lock_file
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-string-l1-1-0
strncmp
api-ms-win-crt-time-l1-1-0
_gmtime64_s
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
qsort
Name
.text
Size
Virtual Size
6.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
917KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
238KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Lj9
Size
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.J8a
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.?#"
Size
8.1MB
Virtual Size
8.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Jule-Hack/configs/safe.cfg
- SHA256 f3bcd94af021f317262205cb2c97780147547877d1ee4e7ab51f62def613a9e8
- MD5 3335e47edf684b8c002ca7dde451b0b7
- SHA1 07f160935fbf38ce679e8f56f91412401c05ffaf
- SHA512 fc632fe591b936ad1e32f2ba1cba66540243edfef9e98a126e862ff4dae05c54071b6a6ef346074eac5a487a8e1c52b3cdfac234a97496c0ef2b484ad02c71df
- TLSH T1C73147F8822CC8DCD502E158837C1F8128D370CEE1D1AC81FBC952166F879F915DAB44
- MD5 SHA1 SHA512 TLSH