General
- Target FileJet.zip
- Size 483KB
- Sample260703-xp3lpsbt4l
- SHA256 d074a093143dd9fd5d9569cee033156bbfa1baaff295be4fcd7b04c8ce709796
- MD5 c84ca5a3c2c94bc9770b74c8ba0cb8fa
- SHA1 3d6b00aaee4d68719d6ab0691b39d35a528af5b0
- SHA512 941f4495cf1d7ac2da2a8758cd3010f096b24b4ec617022f637a05ac7e1c635a36a64d622aff942a16b72dfa0057f0cce0e282e8bc95632f98a8310fd13b0ffd
- SSDEEP 12288:bvhVfuxHw+K260kX0j0fr7gSxFS2TQbFr51TY25:bJVoHTK2yvxFS2u7T5
- TLSH T15CB4235622A33713B6BA79E6873E413EF2FF805924F7E47B65153D9F0608163FAA0901
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
filejet.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
filejet.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target filejet.exe
- Size 1.0MB
- SHA256 b1ef3582cd461327d9a93d210c7d503ece186ce6a86d3105355da45c5a208b62
- MD5 d5e33bf3065ccab412fe520050047d6c
- SHA1 ddc64ccf6e7ec65e9fd991201fbf0cd2b499eafc
- SHA512 deea95b75c18e8b5e34fd92bfe356fa31444197fb70df203fe847661e35d9c346a4aee54052f77d016c727f98852b84a56fa6cb417b0bc631b0b8680d949644d
- SSDEEP 24576:/QFVap5PFuuuuPz2iKeRpJ6iruEOwRy+4FFNeX91:UapTL2iKeRpJ6iar9F
- TLSH T155355A12F285CB1AC24917F6D573879852356863EF12DFCEE96733B46AB33D068482E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.