General
- Target JKL_supporter.exe
- Size 13.6MB
- Sample260812-3s617axaph
- SHA256 227082b3085c6df12a8f4884fcaeb6fb0cbea9282882632566934e7019642daa
- MD5 d9f74c750216caf68236841ec45bd502
- SHA1 5126e243e32cfd11e5565c6bed80524dd9a2d480
- SHA512 65c0149214e136dd344cfd9f2f10906ec64f31897632cec5ef145721e1d4d37a448bbe207181b152f954d55e31f01f0bef57d158cf841788a2bd6e50e9acef8a
- SSDEEP 196608:eBW2ex0W8UAyNLE9h0urHmmeuhHToAUPNfGU5vXvWu2TuG9zLElkXQkZ+PSdva/s:e1W8Mi0uC6hHTodRGkXO9v9zuqTA6di
- TLSH T11BE633A9B3D948E8F95AA73956C2066673B2B4100771C2DB4BF84DA12D730E4FE31772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
JKL_supporter.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
JKL_supporter.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target JKL_supporter.exe
- Size 13.6MB
- SHA256 227082b3085c6df12a8f4884fcaeb6fb0cbea9282882632566934e7019642daa
- MD5 d9f74c750216caf68236841ec45bd502
- SHA1 5126e243e32cfd11e5565c6bed80524dd9a2d480
- SHA512 65c0149214e136dd344cfd9f2f10906ec64f31897632cec5ef145721e1d4d37a448bbe207181b152f954d55e31f01f0bef57d158cf841788a2bd6e50e9acef8a
- SSDEEP 196608:eBW2ex0W8UAyNLE9h0urHmmeuhHToAUPNfGU5vXvWu2TuG9zLElkXQkZ+PSdva/s:e1W8Mi0uC6hHTodRGkXO9v9zuqTA6di
- TLSH T11BE633A9B3D948E8F95AA73956C2066673B2B4100771C2DB4BF84DA12D730E4FE31772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.