Overview
overview
7Static
static
3jarona.exe
windows10-2004-x64
7jarona.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$TEMP/vcre...15.exe
windows10-2004-x64
4$TEMP/vcre...15.exe
windows11-ltsc_2024-x64
4Uninstall.exe
windows10-2004-x64
7Uninstall.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3jarona.exe
windows10-2004-x64
1jarona.exe
windows11-ltsc_2024-x64
1General
- Target jarona.exe
- Size 24.8MB
- Sample260930-b6ys7asxht
- SHA256 1d903cf44e9b197b2de7f65ef87e03b813a9c6cd3ef79411d9b81dd69eeeff33
- MD5 aab9be395bc6f2ea6b41625a31b280e7
- SHA1 12eabd6c1e5b28287cc67802781b8775745c9045
- SHA512 9f0fe68536e2e3703f23e9b4f587d9f6348e6630e3bbfdf8484cd5e2c335362004eb8f5d52932a547c68c8a2701a344d9662ca1bfed01fe9fc229fe99ea8c877
- SSDEEP 786432:HubUy9Kyu0Vgyv5vokZD2tMT8mWDACjI421oy1:HUzu0VgyvokYtYHXCE4U
- TLSH T16D47334CB32C8509FB617432EB6AD53942853E1FC42A847299C43F9F7BF2DC9411B6A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jarona.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jarona.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$TEMP/vcredist_x86_2015.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$TEMP/vcredist_x86_2015.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Uninstall.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Uninstall.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
jarona.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
jarona.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target jarona.exe
- Size 24.8MB
- SHA256 1d903cf44e9b197b2de7f65ef87e03b813a9c6cd3ef79411d9b81dd69eeeff33
- MD5 aab9be395bc6f2ea6b41625a31b280e7
- SHA1 12eabd6c1e5b28287cc67802781b8775745c9045
- SHA512 9f0fe68536e2e3703f23e9b4f587d9f6348e6630e3bbfdf8484cd5e2c335362004eb8f5d52932a547c68c8a2701a344d9662ca1bfed01fe9fc229fe99ea8c877
- SSDEEP 786432:HubUy9Kyu0Vgyv5vokZD2tMT8mWDACjI421oy1:HUzu0VgyvokYtYHXCE4U
- TLSH T16D47334CB32C8509FB617432EB6AD53942853E1FC42A847299C43F9F7BF2DC9411B6A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd
- MD5 6f3098fb5f3db26f3bb84f5481109e39
- SHA1 9270793e404cc42c6f5be1eb1eb4305f166c656d
- SHA512 0462beae0fbd882dc0b6a09547a7959c051928b828e28125b433794de0258f90f3dec8f1920290f114970d2540a113224b8ab372fcee4dfe87f139be4ac0c0d1
- SSDEEP 384:lgw9eYfMCU9oJNJJjL3bhLNdSDL6o5VrSRLmCvl:39AleJNbf3tNgDLn28wl
- TLSH T14E621A527AC120F2DDD6A53037E77F236FB2B52094D58C1B97633E4B5922212BE39362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 60d4a86f65e141d4b6b778e5f448a0c818bd2fa28db7b9dabc1395d354b19cc5
- MD5 ea00e2678e4679ba28b0f560baec9776
- SHA1 f9b647b1ab50cc2de981757ac914a5787bccd95a
- SHA512 2ee7a4a0af955ba376c66d13e626ca135b2afd13277a006f523eb2fdc1133a12ea35b065a8c119843fbe82f89190cdb2b769329af14e4313a2419b739b27337a
- SSDEEP 192:UA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6gn9Mw:MR7SrtTv53tdtTgwF4SQbGPX36g9Mw
- TLSH T110425C496B618EF2F62A463729B77F264B38EE1411E446DB8FD38445E8A01E721363C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/vcredist_x86_2015.exe
- Size 13.1MB
- SHA256 fdd1e1f0dcae2d0aa0720895eff33b927d13076e64464bb7c7e5843b7667cd14
- MD5 1a15e6606bac9647e7ad3caa543377cf
- SHA1 bfb74e498c44d3a103ca3aa2831763fb417134d1
- SHA512 e8cb67fc8e0312da3cc98364b96dfa1a63150ab9de60069c4af60c1cf77d440b7dffe630b4784ba07ea9bf146bdbf6ad5282a900ffd6ab7d86433456a752b2fd
- SSDEEP 393216:S1RPq5dCsKSR65cX7Eyd/qnejOFxP7OEnl4L/Vvc:yP5iw56oyleej2OEnlwc
- TLSH T189D63336A3648126C5E30573EE15E1206F687329BB1488FBD3447E1D3E69587A3BB34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target Uninstall.exe
- Size 231KB
- SHA256 3ab65699b4a324fdef04192acf122edd0710e91b64ebe433c61a288e756efbf9
- MD5 afdf6a29be2f617f82ac5a0950f4ab9b
- SHA1 ff53aa68e8b1de6b99df791788e1492b987d99a6
- SHA512 13577889711a451ee538855a6b0c3c36d955671897fb7d54ecb3258d880575a556f4e9855dff9df1a37d8644df9fa30963833ba96789e7620e27c21a55a4eb9a
- SSDEEP 3072:c4MrfWdbcDWToWNWnwtzc3EsizzAQ26rTUzq:JMrudbcDdc5zc3EseR2OUG
- TLSH T1DA34C289B6184086F7717935EB3EDA7A82697E5B086A843265D43FCF37F2CC08457272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd
- MD5 6f3098fb5f3db26f3bb84f5481109e39
- SHA1 9270793e404cc42c6f5be1eb1eb4305f166c656d
- SHA512 0462beae0fbd882dc0b6a09547a7959c051928b828e28125b433794de0258f90f3dec8f1920290f114970d2540a113224b8ab372fcee4dfe87f139be4ac0c0d1
- SSDEEP 384:lgw9eYfMCU9oJNJJjL3bhLNdSDL6o5VrSRLmCvl:39AleJNbf3tNgDLn28wl
- TLSH T14E621A527AC120F2DDD6A53037E77F236FB2B52094D58C1B97633E4B5922212BE39362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 60d4a86f65e141d4b6b778e5f448a0c818bd2fa28db7b9dabc1395d354b19cc5
- MD5 ea00e2678e4679ba28b0f560baec9776
- SHA1 f9b647b1ab50cc2de981757ac914a5787bccd95a
- SHA512 2ee7a4a0af955ba376c66d13e626ca135b2afd13277a006f523eb2fdc1133a12ea35b065a8c119843fbe82f89190cdb2b769329af14e4313a2419b739b27337a
- SSDEEP 192:UA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6gn9Mw:MR7SrtTv53tdtTgwF4SQbGPX36g9Mw
- TLSH T110425C496B618EF2F62A463729B77F264B38EE1411E446DB8FD38445E8A01E721363C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target jarona.exe
- Size 7.7MB
- SHA256 f634b45f97996fa53c4dc206094ecd9bd22c9ab4a812a6b2a30306348c593977
- MD5 e629464fd5a27d3f2108a718a970e784
- SHA1 913404f0d0b6b4778f2813bc10f203f017f9ad73
- SHA512 e8badfa7808a6988253da471773fe409441e1288d931ab1a65fa5b1b3dbb23ef9e4ca81b00a3bddf47a7a265dd91244a04780c4375f389cd4ddcce9be631dc7b
- SSDEEP 98304:eeMcXBD3p4LZgHsTD8NoqUA6vtXdEM0Vb:eeMcRrd8INoqUAQhaXJ
- TLSH T1C9866B8572A0C1CDD1678039C256A6FBE6723C45CF5086EB66A03F6D3F73AD049BA712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10