General
- Target jinstall.zip
- Size 100.6MB
- Sample260701-qlz8vae15k
- SHA256 1ad3f874bc73cbeef494d41d2b170eae0d0f3385e68e4707724d88b46ff92446
- MD5 7f38bc23c555b354a0a82e4bfe989d70
- SHA1 6c8a48c82a73fec886e3a379ab9e47c1fca85e54
- SHA512 df2db6c49295149bc9cb0e2959c232f09d91eb3da10d65c8edd70a51e659e6ffee8b8934c0b9f4d00e5573ad1f3478c86c7cde09254530e45381c6f42ee84479
- SSDEEP 3145728:zPNx8MEmNP/oe5B546Qo06ZlCsynJrKWlrxlgW:7nE+P/D5X42C1/SW
- TLSH T1823833C0BFB49AED6CB17AE82126B70323445DA06634C7FABBA417F335211D6D07964E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jinstall.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jinstall.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jinstall.exe
- Size 102.6MB
- SHA256 25ad3d0cfb4233ef3517965a33a3ae07e00b8e4214c42c426fe15ccafc3e45fc
- MD5 0e651c2994ae01483386e5da90856ea8
- SHA1 06501064c03a6cfc208e1a4aa514716c46fec30a
- SHA512 9fc42737b76d1a7d045b6bbf709a7af17433651c19b2dfa5dd45655f5ff135b0ad8a9f2ae9b0394fa66a39d07e60a2745684ab8f333adaa479be5b03fd9a4871
- SSDEEP 3145728:5F5ZaMyf58fyQmjH/C0MRP7nSA+Hpf8YEVbrft:Tr6h8fBmjfCAtE7t
- TLSH T1213833D1FDE8AE85ECB1B5B91822A237323559BCC172C6A3739173E319220F958B454F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.