General
- Target JDownloader2Setup_windows-amd64_v25_0_4_1.exe
- Size 77.3MB
- Sample260903-18ekrsxblc
- SHA256 0976e5ae2d710d4aa61bb452832aea732b6c9f784899bf98eff7ca5a3ce89717
- MD5 84d7cf0c461c01d5a56f7e77eed48ed8
- SHA1 70dc726dd95087c7ff451b878e130c30871ce032
- SHA512 c604b32326e28f9f706e6488f1cce0735025795bbc14653be987c32c36c67bf349817cdb3053c3e8324de3106585052cc6ee40acde6e1cd442507e17dd4623ed
- SSDEEP 1572864:cdDnmJjvHMEw+Emkx9EoBgge0aMnY6ScnY9Hbu8b81DQw55+0URxnr:k44E5kHkgLDn1G9p8JQcn81r
- TLSH T1DF08331C3F7C7799D9AD863C6B732A4B44AE2F2D174410BF6AF217856B062C02DF50A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JDownloader2Setup_windows-amd64_v25_0_4_1.exe
Resource
win10ltsc2021-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
JDownloader2Setup_windows-amd64_v25_0_4_1.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target JDownloader2Setup_windows-amd64_v25_0_4_1.exe
- Size 77.3MB
- SHA256 0976e5ae2d710d4aa61bb452832aea732b6c9f784899bf98eff7ca5a3ce89717
- MD5 84d7cf0c461c01d5a56f7e77eed48ed8
- SHA1 70dc726dd95087c7ff451b878e130c30871ce032
- SHA512 c604b32326e28f9f706e6488f1cce0735025795bbc14653be987c32c36c67bf349817cdb3053c3e8324de3106585052cc6ee40acde6e1cd442507e17dd4623ed
- SSDEEP 1572864:cdDnmJjvHMEw+Emkx9EoBgge0aMnY6ScnY9Hbu8b81DQw55+0URxnr:k44E5kHkgLDn1G9p8JQcn81r
- TLSH T1DF08331C3F7C7799D9AD863C6B732A4B44AE2F2D174410BF6AF217856B062C02DF50A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.