General
- Target 4e89c5ed5d7f39e317fd424787e35d448fff8f40e24ab95ad268820d1cd024a9
- Size 207KB
- Sample260826-kc5jbastaz
- SHA256 4e89c5ed5d7f39e317fd424787e35d448fff8f40e24ab95ad268820d1cd024a9
- MD5 c3d993b92e8288e4c4bb31e65ca4aaac
- SHA1 1840e514dad7005c9d4952c5f3f728bf6a8282f6
- SHA512 f753d8384bea2f0a603ca6de8f9be24e36a0aae388bf42048da9f6a7b653fda08291ffbb2581a8f0827e6140e4afc4bd959fc131c7ec0f91c1c97074d733ea26
- SSDEEP 6144:pLy2Kwc64YIK628wzQocJje7RsUmWgX888888888888W88888888888GizGJuyxF:pkwcEO28wzmJje7Rseu888888888888m
- TLSH T184240906B3E710F5E9F7863485B646209D33BC2425F2A21E2F30F61E1D70D959E76B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
4e89c5ed5d7f39e317fd424787e35d448fff8f40e24ab95ad268820d1cd024a9.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 4e89c5ed5d7f39e317fd424787e35d448fff8f40e24ab95ad268820d1cd024a9
- Size 207KB
- SHA256 4e89c5ed5d7f39e317fd424787e35d448fff8f40e24ab95ad268820d1cd024a9
- MD5 c3d993b92e8288e4c4bb31e65ca4aaac
- SHA1 1840e514dad7005c9d4952c5f3f728bf6a8282f6
- SHA512 f753d8384bea2f0a603ca6de8f9be24e36a0aae388bf42048da9f6a7b653fda08291ffbb2581a8f0827e6140e4afc4bd959fc131c7ec0f91c1c97074d733ea26
- SSDEEP 6144:pLy2Kwc64YIK628wzQocJje7RsUmWgX888888888888W88888888888GizGJuyxF:pkwcEO28wzmJje7Rseu888888888888m
- TLSH T184240906B3E710F5E9F7863485B646209D33BC2425F2A21E2F30F61E1D70D959E76B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1