General
- Target 522ea6d5164eae6c6c6e6dcbdf298fccf55d8322c43716fe6ab20c5c3373bd04
- Size 21.2MB
- Sample260923-nes5vasdqc
- SHA256 522ea6d5164eae6c6c6e6dcbdf298fccf55d8322c43716fe6ab20c5c3373bd04
- MD5 3440b8e593868fd908bfafc51860eb36
- SHA1 c3c7a28268bcd14588208676c08b0efd24a5e682
- SHA512 b00fb558ccd83a00510aea2e0eb86a8363c2cfad44e561358eaa232f024b9c013d74cf16d307ecbd80731bf26c2c9b6586f5d330bdc7a39a13ae062963bf3026
- SSDEEP 196608:zckkxcyi3mev3jrC7Uk/tAUzadeebhf++EaoOCbAlxUy3jj2qlt62n6:G7uLrtkVzgNoOCcv3jj/t626
- TLSH T10F278D02B7D74CE6D9C13B74A89F136E7720FE206B2A2B7F554C96205C936DCAC1AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
522ea6d5164eae6c6c6e6dcbdf298fccf55d8322c43716fe6ab20c5c3373bd04.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
522ea6d5164eae6c6c6e6dcbdf298fccf55d8322c43716fe6ab20c5c3373bd04.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
jumpscarerat
Wallets
-
496zBdKDWrnAvjyPPz7QCQTViBYRKVQ26XBHFtsZS5YnQpQBZ6uzrywYK7Fe2GDC4iWoVc71yURmse8tGH9rLb1jC6KzmWq
-
0x4bbeEB066eD09B7AEd07bF39EEe0460DFa261520
-
Lc6eS4FgXD5KvQyV8x3ZtJ2aM7bR9hY1nU
Attributes
-
channel_id
1536801209770582146
-
guild_id
1528761276996522105
-
token
MTUyODc2NTE3NzM1NTU2NzExNg.Gi2IFj.UyMsfmY0SLgwfiaKh2-GW8FoblgKfQDiM2Xfa8
Targets
-
- Target 522ea6d5164eae6c6c6e6dcbdf298fccf55d8322c43716fe6ab20c5c3373bd04
- Size 21.2MB
- SHA256 522ea6d5164eae6c6c6e6dcbdf298fccf55d8322c43716fe6ab20c5c3373bd04
- MD5 3440b8e593868fd908bfafc51860eb36
- SHA1 c3c7a28268bcd14588208676c08b0efd24a5e682
- SHA512 b00fb558ccd83a00510aea2e0eb86a8363c2cfad44e561358eaa232f024b9c013d74cf16d307ecbd80731bf26c2c9b6586f5d330bdc7a39a13ae062963bf3026
- SSDEEP 196608:zckkxcyi3mev3jrC7Uk/tAUzadeebhf++EaoOCbAlxUy3jj2qlt62n6:G7uLrtkVzgNoOCcv3jj/t626
- TLSH T10F278D02B7D74CE6D9C13B74A89F136E7720FE206B2A2B7F554C96205C936DCAC1AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects JumpscareRAT
-
Family: JumpscareRAT
JumpscareRAT is a Windows RAT with ransomware capabilities written in C++.