General
- Target jn70.exe
- Size 7.0MB
- Sample261029-z11ycss1a1
- SHA256 79066743bf252e58a5340722ff43caa189603ff30c1233b9c98334c08de13325
- MD5 e6a3c63006ee0975d78ef7149828cd02
- SHA1 8f8f4ed8cfe899627b1dabf6e612d2161a5bfdce
- SHA512 1683f79845c58e0084e03f8b6504eb6e5cfa36a9466b9c68cc2b7cd8d9c3de89b1ed55096bd9d019214dcdb56e5a5c5f618e356123086c4098ed5b1ddded1e69
- SSDEEP 196608:fBDI+ziEq+N237Uwf/X+2v5pj8xv9ITqbM9CB:BI+mBH3p/u2v5pIxu4MQ
- TLSH T19A7633A3B8E1EE29E404D2BA05F5E8859F431AF09B535C37405A9F1D3216FCDABF4648
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jn70.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
jn70.exe
Resource
win11ltsc2024-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target jn70.exe
- Size 7.0MB
- SHA256 79066743bf252e58a5340722ff43caa189603ff30c1233b9c98334c08de13325
- MD5 e6a3c63006ee0975d78ef7149828cd02
- SHA1 8f8f4ed8cfe899627b1dabf6e612d2161a5bfdce
- SHA512 1683f79845c58e0084e03f8b6504eb6e5cfa36a9466b9c68cc2b7cd8d9c3de89b1ed55096bd9d019214dcdb56e5a5c5f618e356123086c4098ed5b1ddded1e69
- SSDEEP 196608:fBDI+ziEq+N237Uwf/X+2v5pj8xv9ITqbM9CB:BI+mBH3p/u2v5pIxu4MQ
- TLSH T19A7633A3B8E1EE29E404D2BA05F5E8859F431AF09B535C37405A9F1D3216FCDABF4648
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Windows security bypass
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Windows security modification
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2