Analysis
- max time kernel
150s - max time network
136s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 06:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jailbreak%20%282%29.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jailbreak%20%282%29.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target jailbreak%20%282%29.exe
- Size 984KB
- Sample261030-g41gwsbs8k
- SHA256 59ac82d68753e0de3fb58815db5a068363b2a207c5ee0b92f2a8a7ba56048e49
- MD5 e11e27ba0a45c63fc9924fa40bb0e210
- SHA1 5dc3dd427b177dcbe24f47b4e1ee29ea5d23e81b
- SHA512 333d40ea8d50d04aa28f575812330187388a362e726a3252cc35cb813bbdc9a0873442f6f6d8202c305c0ad8fbd688963f4d72631edc45bc928036f1796572f1
- SSDEEP 12288:otZ+4CUXf5+VJ3FKEufKNtRWBuH4IWPA3mT+7fQhQtvGuy/KPrvxhqbgsJOzoip7:jXUXf56VKtStIBuYWvGuykv70JOzd
- TLSH T121252A1BE6B345E8C52FD07487639772BE70B4290234BD6E1AA8DB321F21D509F6E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 3 discord.com 4 discord.com - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jailbreak%20%282%29.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jailbreak%20%282%29.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1668 jailbreak%20%282%29.exe