General
- Target MJ Free.exe
- Size 909KB
- Sample260802-cy5r7ssdng
- SHA256 7ed2ddedde8e507dc2c8c9dcf273395c39ccc053e6ed9c6013ac085a1c38da31
- MD5 4af87430814a81c089f8d50dd2771bba
- SHA1 1fc50c803ebf695aba5bf594707fb02c642b4586
- SHA512 c5530b1997af216a67203929fa15ecf64d29f659cb18927e500d329d085c144e7ba935461c853eb1d5d218d27f89c0864e76f627122370bf9dca74c6d4b92ba4
- SSDEEP 24576:luKj1oyUt0goWdY6ttZTm9Sp3iInMWLSzdh+YW2:lu0iyUt0rlKDFSInFWph+z2
- TLSH T1A115BF09FAF145A4C17BA53994B6A31BE736B84C1B3086E773E805942FA33E44F76712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MJ Free.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
MJ Free.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target MJ Free.exe
- Size 909KB
- SHA256 7ed2ddedde8e507dc2c8c9dcf273395c39ccc053e6ed9c6013ac085a1c38da31
- MD5 4af87430814a81c089f8d50dd2771bba
- SHA1 1fc50c803ebf695aba5bf594707fb02c642b4586
- SHA512 c5530b1997af216a67203929fa15ecf64d29f659cb18927e500d329d085c144e7ba935461c853eb1d5d218d27f89c0864e76f627122370bf9dca74c6d4b92ba4
- SSDEEP 24576:luKj1oyUt0goWdY6ttZTm9Sp3iInMWLSzdh+YW2:lu0iyUt0rlKDFSInFWph+z2
- TLSH T1A115BF09FAF145A4C17BA53994B6A31BE736B84C1B3086E773E805942FA33E44F76712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext