General
- Target JinxSpoofer.exe
- Size 1.2MB
- Sample260827-29kc3sdr4v
- SHA256 988fdf6c6c55b32a911e0201792e39eef82ab75db0217601f155244deff9ab81
- MD5 271a33692cc6daafa893315539ae5fb6
- SHA1 a81f7fd151ab230473aa2f6a40cfa3b2e083fd8c
- SHA512 0a0beb588ee8dffa6deaa30866088d0be3d6891c21f8930d29dd325777a3bfebaeccfb3aaf115ee66c76b32141d58b5d82f814c848fba6353583a1d1faed34f0
- SSDEEP 12288:PFUNDaR66666666666666666666666666666666666666666666666666666666X:PFOa6bOVE5ifGPRZwWvf3fdU
- TLSH T1EE457C43EA938498C111C9F1565AF23BF9627C8E0B50B587A7C42F633A777A5F238706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JinxSpoofer.exe
Resource
win10v2004-20260513-en
11 signatures
900 seconds
Behavioral task
behavioral2
Sample
JinxSpoofer.exe
Resource
win11ltsc2024-20260709-en
9 signatures
900 seconds
Malware Config
Targets
-
- Target JinxSpoofer.exe
- Size 1.2MB
- SHA256 988fdf6c6c55b32a911e0201792e39eef82ab75db0217601f155244deff9ab81
- MD5 271a33692cc6daafa893315539ae5fb6
- SHA1 a81f7fd151ab230473aa2f6a40cfa3b2e083fd8c
- SHA512 0a0beb588ee8dffa6deaa30866088d0be3d6891c21f8930d29dd325777a3bfebaeccfb3aaf115ee66c76b32141d58b5d82f814c848fba6353583a1d1faed34f0
- SSDEEP 12288:PFUNDaR66666666666666666666666666666666666666666666666666666666X:PFOa6bOVE5ifGPRZwWvf3fdU
- TLSH T1EE457C43EA938498C111C9F1565AF23BF9627C8E0B50B587A7C42F633A777A5F238706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2