General
- Target jspm9-9.0.26.625-win32.exe
- Size 9.3MB
- Sample260804-be61gszgja
- SHA256 11843e79a0ea85c3fe2dca425f45768e3e4e86c85cd8383b0800979b748b542d
- MD5 813cdfed88dd8c7b4a237ef3c822d025
- SHA1 d0884f8eab6e9795fd12ec5efa5cba579440dcea
- SHA512 d9066f3dd6cd7f9d98ac5dfee5d294b625fd737b9931e62f656714705cfba35a3abe2aafefb7c8704b5154efb6b63651c85a2ad7c8120c0ea197f82717d8e2a8
- SSDEEP 196608:CzhJPAFfTDMsRXIT3/O8jkE4FH2QIkgodY3D:6hefMsRXOP5gH2QIkgodID
- TLSH T183A6222BB228603ED9AAC63D4573925058777E61A80ABC1A17F43D0FFF771201EFA645
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jspm9-9.0.26.625-win32.exe
Resource
win10v2004-20260513-en
16 signatures
300 seconds
Behavioral task
behavioral2
Sample
jspm9-9.0.26.625-win32.exe
Resource
win11ltsc2024-20260709-en
16 signatures
300 seconds
Malware Config
Targets
-
- Target jspm9-9.0.26.625-win32.exe
- Size 9.3MB
- SHA256 11843e79a0ea85c3fe2dca425f45768e3e4e86c85cd8383b0800979b748b542d
- MD5 813cdfed88dd8c7b4a237ef3c822d025
- SHA1 d0884f8eab6e9795fd12ec5efa5cba579440dcea
- SHA512 d9066f3dd6cd7f9d98ac5dfee5d294b625fd737b9931e62f656714705cfba35a3abe2aafefb7c8704b5154efb6b63651c85a2ad7c8120c0ea197f82717d8e2a8
- SSDEEP 196608:CzhJPAFfTDMsRXIT3/O8jkE4FH2QIkgodY3D:6hefMsRXOP5gH2QIkgodID
- TLSH T183A6222BB228603ED9AAC63D4573925058777E61A80ABC1A17F43D0FFF771201EFA645
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
2Subvert Trust Controls
2Install Root Certificate
2