1d903cf44e9b197b2de7f65ef87e03b813a9c6cd3ef79411d9b81dd69eeeff33

Resubmissions

30/09/2026, 01:51

260930-b96cfacb637

30/09/2026, 01:46

260930-b6ys7asxht7

Sharing

Copy URL Twitter E-mail

General

Target
jarona.exe
Size 24.8MB
Sample260930-b96cfacb63
SHA256 1d903cf44e9b197b2de7f65ef87e03b813a9c6cd3ef79411d9b81dd69eeeff33
MD5 aab9be395bc6f2ea6b41625a31b280e7
SHA1 12eabd6c1e5b28287cc67802781b8775745c9045
SHA512 9f0fe68536e2e3703f23e9b4f587d9f6348e6630e3bbfdf8484cd5e2c335362004eb8f5d52932a547c68c8a2701a344d9662ca1bfed01fe9fc229fe99ea8c877
SSDEEP 786432:HubUy9Kyu0Vgyv5vokZD2tMT8mWDACjI421oy1:HUzu0VgyvokYtYHXCE4U
TLSH
T16D47334CB32C8509FB617432EB6AD53942853E1FC42A847299C43F9F7BF2DC9411B6A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  jarona.exe
- Size 24.8MB
- SHA256 1d903cf44e9b197b2de7f65ef87e03b813a9c6cd3ef79411d9b81dd69eeeff33
- MD5 aab9be395bc6f2ea6b41625a31b280e7
- SHA1 12eabd6c1e5b28287cc67802781b8775745c9045
- SHA512 9f0fe68536e2e3703f23e9b4f587d9f6348e6630e3bbfdf8484cd5e2c335362004eb8f5d52932a547c68c8a2701a344d9662ca1bfed01fe9fc229fe99ea8c877
- SSDEEP 786432:HubUy9Kyu0Vgyv5vokZD2tMT8mWDACjI421oy1:HUzu0VgyvokYtYHXCE4U
- TLSH
  T16D47334CB32C8509FB617432EB6AD53942853E1FC42A847299C43F9F7BF2DC9411B6A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd
- MD5 6f3098fb5f3db26f3bb84f5481109e39
- SHA1 9270793e404cc42c6f5be1eb1eb4305f166c656d
- SHA512 0462beae0fbd882dc0b6a09547a7959c051928b828e28125b433794de0258f90f3dec8f1920290f114970d2540a113224b8ab372fcee4dfe87f139be4ac0c0d1
- SSDEEP 384:lgw9eYfMCU9oJNJJjL3bhLNdSDL6o5VrSRLmCvl:39AleJNbf3tNgDLn28wl
- TLSH
  T14E621A527AC120F2DDD6A53037E77F236FB2B52094D58C1B97633E4B5922212BE39362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 60d4a86f65e141d4b6b778e5f448a0c818bd2fa28db7b9dabc1395d354b19cc5
- MD5 ea00e2678e4679ba28b0f560baec9776
- SHA1 f9b647b1ab50cc2de981757ac914a5787bccd95a
- SHA512 2ee7a4a0af955ba376c66d13e626ca135b2afd13277a006f523eb2fdc1133a12ea35b065a8c119843fbe82f89190cdb2b769329af14e4313a2419b739b27337a
- SSDEEP 192:UA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6gn9Mw:MR7SrtTv53tdtTgwF4SQbGPX36g9Mw
- TLSH
  T110425C496B618EF2F62A463729B77F264B38EE1411E446DB8FD38445E8A01E721363C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/ioSpecial.ini
- Size 193B
- SHA256 4868ee046975b35282e7a613526d3c9d7b3e0b1122794238d286aa464b0b5bd1
- MD5 81b9854cd40b04c3d50391ea6d28c61e
- SHA1 d31ae147cac2daef64aa27dab5179334e2101da8
- SHA512 cdf7d0924536c3ebd58bde52617287035d481b4b07622efd6a0e37cefeffe1a6cdb42c80b2b94e9ab57006bbf981fb8a23b87cf00783cd73e5419a5c5880facf
- TLSH
  T185C0128DD09A812548222707BE7ABFA177903D505B2718F7D1B24D17CB4C9CD58CD5C6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 25KB
- SHA256 5745699998b02a73ad236295ee76f3f705360bb50d93eab8bcdb5df31f0d0f9c
- MD5 4d93181c1e25297784a3c4a34bf154e4
- SHA1 dba5531b7be42cfca390f3955912779597148753
- SHA512 57087db6a18cab97512e095f9dbc29f769aeed9cb17629a4b539c051be9f60a4a0334d87302dc66bd6f6520c6965876b00b2a0ee3c5c19350238506d94bc800c
- SSDEEP 48:jQhQp3gMIoxbUb4fGywQxGIvRUQxjzxx5KYAvQQQv:jQhQpQ1oXvZ5h5oxvQQQv
- TLSH
  T152C26DA82B03AB31F4317EFD0FD5D8DCA1186D56BE76B50AB467BB9A0E3C10961C2744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 150KB
- SHA256 c05ca649aeb91de552c2436915277bc153d5a87a81ec788f2f05219e0a705990
- MD5 5b5a1aafc2b00c6cb6ac3eb0ff078b83
- SHA1 1d46a3a896f77964ff3bd93ff1e7d2b0a6d1544a
- SHA512 9ab4f23ea1046c6d087ae4031622d667b8be810f1144b9c41ba11a921ddf5d5dbc57bf990be0e739ff9798d30aae01e1a30e16f87d8426e134ce4e7706feb0c9
- SSDEEP 192:ylQQQQQQQQQQQQQyQQQQQQQQQQQQQyQQQQQQQQQQQQQyQQQQQQQQQQQQQyQSQQQR:y
- TLSH
  T137E36BBC2E03AE30F637BBFD0FD484FCD2286D657975AD09A5767BAA093C10912C2645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  $TEMP/vcredist_x86_2015.exe
- Size 13.1MB
- SHA256 fdd1e1f0dcae2d0aa0720895eff33b927d13076e64464bb7c7e5843b7667cd14
- MD5 1a15e6606bac9647e7ad3caa543377cf
- SHA1 bfb74e498c44d3a103ca3aa2831763fb417134d1
- SHA512 e8cb67fc8e0312da3cc98364b96dfa1a63150ab9de60069c4af60c1cf77d440b7dffe630b4784ba07ea9bf146bdbf6ad5282a900ffd6ab7d86433456a752b2fd
- SSDEEP 393216:S1RPq5dCsKSR65cX7Eyd/qnejOFxP7OEnl4L/Vvc:yP5iw56oyleej2OEnlwc
- TLSH
  T189D63336A3648126C5E30573EE15E1206F687329BB1488FBD3447E1D3E69587A3BB34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  Uninstall.exe
- Size 231KB
- SHA256 3ab65699b4a324fdef04192acf122edd0710e91b64ebe433c61a288e756efbf9
- MD5 afdf6a29be2f617f82ac5a0950f4ab9b
- SHA1 ff53aa68e8b1de6b99df791788e1492b987d99a6
- SHA512 13577889711a451ee538855a6b0c3c36d955671897fb7d54ecb3258d880575a556f4e9855dff9df1a37d8644df9fa30963833ba96789e7620e27c21a55a4eb9a
- SSDEEP 3072:c4MrfWdbcDWToWNWnwtzc3EsizzAQ26rTUzq:JMrudbcDdc5zc3EseR2OUG
- TLSH
  T1DA34C289B6184086F7717935EB3EDA7A82697E5B086A843265D43FCF37F2CC08457272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral15 behavioral16
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd
- MD5 6f3098fb5f3db26f3bb84f5481109e39
- SHA1 9270793e404cc42c6f5be1eb1eb4305f166c656d
- SHA512 0462beae0fbd882dc0b6a09547a7959c051928b828e28125b433794de0258f90f3dec8f1920290f114970d2540a113224b8ab372fcee4dfe87f139be4ac0c0d1
- SSDEEP 384:lgw9eYfMCU9oJNJJjL3bhLNdSDL6o5VrSRLmCvl:39AleJNbf3tNgDLn28wl
- TLSH
  T14E621A527AC120F2DDD6A53037E77F236FB2B52094D58C1B97633E4B5922212BE39362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 60d4a86f65e141d4b6b778e5f448a0c818bd2fa28db7b9dabc1395d354b19cc5
- MD5 ea00e2678e4679ba28b0f560baec9776
- SHA1 f9b647b1ab50cc2de981757ac914a5787bccd95a
- SHA512 2ee7a4a0af955ba376c66d13e626ca135b2afd13277a006f523eb2fdc1133a12ea35b065a8c119843fbe82f89190cdb2b769329af14e4313a2419b739b27337a
- SSDEEP 192:UA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6gn9Mw:MR7SrtTv53tdtTgwF4SQbGPX36g9Mw
- TLSH
  T110425C496B618EF2F62A463729B77F264B38EE1411E446DB8FD38445E8A01E721363C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/ioSpecial.ini
- Size 193B
- SHA256 4868ee046975b35282e7a613526d3c9d7b3e0b1122794238d286aa464b0b5bd1
- MD5 81b9854cd40b04c3d50391ea6d28c61e
- SHA1 d31ae147cac2daef64aa27dab5179334e2101da8
- SHA512 cdf7d0924536c3ebd58bde52617287035d481b4b07622efd6a0e37cefeffe1a6cdb42c80b2b94e9ab57006bbf981fb8a23b87cf00783cd73e5419a5c5880facf
- TLSH
  T185C0128DD09A812548222707BE7ABFA177903D505B2718F7D1B24D17CB4C9CD58CD5C6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 25KB
- SHA256 5745699998b02a73ad236295ee76f3f705360bb50d93eab8bcdb5df31f0d0f9c
- MD5 4d93181c1e25297784a3c4a34bf154e4
- SHA1 dba5531b7be42cfca390f3955912779597148753
- SHA512 57087db6a18cab97512e095f9dbc29f769aeed9cb17629a4b539c051be9f60a4a0334d87302dc66bd6f6520c6965876b00b2a0ee3c5c19350238506d94bc800c
- SSDEEP 48:jQhQp3gMIoxbUb4fGywQxGIvRUQxjzxx5KYAvQQQv:jQhQpQ1oXvZ5h5oxvQQQv
- TLSH
  T152C26DA82B03AB31F4317EFD0FD5D8DCA1186D56BE76B50AB467BB9A0E3C10961C2744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  bit_flowery.ogg
- Size 398KB
- SHA256 3af34b72cc7af213a0c5bb31939e9af8d354802bad231f3305ed2134a641ed98
- MD5 7e5969c7d900734f004c23332f528e2d
- SHA1 c5b039a3def2df068a6b76e1e4f0ade8708b2d17
- SHA512 8f9cbcf2cc2290270732d0b820a2ba0629223d1e0545ff4acad0d71687a7ab1a2cec99d0c6742f6849b59f6bddc43179b141322b65ecab64e9e7cfffdfe50af9
- SSDEEP 6144:WiJCxeups6y9XZK6aM36u3r5OWUBKhe1XPuRlMnpYup2YvMhm53BuctW4Log:Wi6L8jKAP3r57/lMpYuUY0gvuctWng
- TLSH
  T19884128BCA969DDBE9CC273584671F343B790DA945A1070A9B787039BC7F2386C1DE42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  data.win
- Size 1.5MB
- SHA256 9549ac51e763818f6b0092d12185a17a5a1c624c8813ef33aa1ff1322ce29cdd
- MD5 904267f065d6fd465952f7980b3378c5
- SHA1 f4d63a06facf517077e6f42a586200f3f47b584b
- SHA512 de050b3ff9a3612ad36866b062b5d5e169ba30692757d44c559bb9065d82147c32e22dcf3d48d7307db83777e96bc377e466b7a3e37d559f8f6b0bfaa2669dfa
- SSDEEP 24576:JcT92NgUNISq9Z+/mxuYVGC8Wj32rgkkTSers4L0pv9h4jvl7i9zx7X9:uTAmUU9Z+/mxjI5kFkleYl4zlaxX9
- TLSH
  T15D65F153F0838610D4778B35CDA29A500A6BBD5DFE46162F3085FF58B1A3390EB267AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  flower_castle.ogg
- Size 6.3MB
- SHA256 7107a9a2f912f54aacaad053765af30b04557061cc8ad71a1c359f27fb6c16ad
- MD5 296e0e9ae36394ae4499ec1058bb9647
- SHA1 d57ab7d3864e1aa6d1b7099d24d218725e8dd3bc
- SHA512 6d557f19932c6a78c5a20bffd842e7dc008b630d632d08348e09e0351a0dc27691eef61ab0b4a31c90fc5467d2fc5b6c6ca98f520174aaf4e12b9789ee5c67c9
- SSDEEP 98304:I5c4/5AuQLGdT1Ta/NeW+Yhx0REjffE+72+TKRQe1/9IbpW7QnVf3YLMUI89zST3:M9RAzLSEz0sfRLeRQcabBp+9TzST3
- TLSH
  T15A6633D0DED14E9BE42F3AF9E6E212547A6D8C7FA3B50C009AE4702D227D3A11947D1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Executes dropped EXE

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32