Overview

overview

8

Static

static

3

purge_jewhunting.exe

windows10-2004-x64

8

purge_jewhunting.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    purge_jewhunting.zip
  • Size 328KB
  • Sample260907-a6awpaea62
  • SHA256 da360f578ffb6ee7878af1f5cbc8eec9be3c649407452b6241ad2c758b6b14fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionexecutionspywaretrojan

Malware Config

Targets

    • Target
      purge_jewhunting.exe
    • Size 692KB
    • SHA256 e920aba19bb75cdf9b8e9e8bea0d727dbf04b93521ae84d7ec649185098b43e9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasionexecutionspywaretrojan

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • Hide Artifacts: Hidden Window

      Windows that would typically be displayed when an application carries out an operation can be hidden.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks