General
- Target jman.png
- Size 70KB
- Sample260723-ee82maga39
- SHA256 94ed30455bbe98022cb6c829859923a6cfb39722d3c6ea044b60fc7db65f23f6
- MD5 ed3ea58b03290cfb5e40aa54e7f2f0cc
- SHA1 74382e2249dca19beb205ee267d2bfde41f045e9
- SHA512 c4a6cb7580fe1be9a036cb9d5cf0d340dfe8ffba0c1d8f7b0d3061f6a95461a39bffcc6b2b95224884a494bd8d2fcff24f2e7ac30a95fe6260b31b7299b5a6ca
- SSDEEP 1536:flGl95Qzn7r6Qe0crA3guoLAnWXvCu2B/IdtdhEIrGellh4CyNEPK:dGl/q7r6QeQwuoM+Ku2NgyIyu4EPK
- TLSH T1636312C8A37C616F595AAA35FAB70A76113BEF4BDF0409E5346F30104C7809EBAB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jman.png
Resource
win10v2004-20260513-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
jman.png
Resource
win11ltsc2024-20260710-en
20 signatures
900 seconds
Malware Config
Targets
-
- Target jman.png
- Size 70KB
- SHA256 94ed30455bbe98022cb6c829859923a6cfb39722d3c6ea044b60fc7db65f23f6
- MD5 ed3ea58b03290cfb5e40aa54e7f2f0cc
- SHA1 74382e2249dca19beb205ee267d2bfde41f045e9
- SHA512 c4a6cb7580fe1be9a036cb9d5cf0d340dfe8ffba0c1d8f7b0d3061f6a95461a39bffcc6b2b95224884a494bd8d2fcff24f2e7ac30a95fe6260b31b7299b5a6ca
- SSDEEP 1536:flGl95Qzn7r6Qe0crA3guoLAnWXvCu2B/IdtdhEIrGellh4CyNEPK:dGl/q7r6QeQwuoM+Ku2NgyIyu4EPK
- TLSH T1636312C8A37C616F595AAA35FAB70A76113BEF4BDF0409E5346F30104C7809EBAB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops desktop.ini file(s)
AutoIT Executable
AutoIT scripts compiled to PE executables.
Suspicious use of SetThreadContext