General
- Target jli.dll.exe
- Size 718KB
- Sample261113-yxtjfa1w4l
- SHA256 5296b42bb77e0c4b116093e0d10adbd26df0ff3c77d85aa7b3bc3227c08c1ac3
- MD5 b089905e5cbc571045a45f806efb55d5
- SHA1 32e30cd23029f41044b1e1b159f9c625a97e7d4f
- SHA512 7e716f12f362078d304f3abb808f0b6ef07753a69c3c28e778ac72d11d7546156e5602e6782d6027b89f18009691d77c1a8bfc18377bc01f668e9ebed4daa211
- SSDEEP 12288:953VW1unIZES6WkxF5AXXZWVnJb3Nmdr3xM+LPLlBI1nXbEujN5PGM0c/:9lV6WWkM2nKdrhjLwXbEWN5+M0c/
- TLSH T1CDF4E164B3721FA9C4388675C66BBA9448663D510F30DCFF9AE913460F313E1A73AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jli.dll
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jli.dll
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jli.dll.exe
- Size 718KB
- SHA256 5296b42bb77e0c4b116093e0d10adbd26df0ff3c77d85aa7b3bc3227c08c1ac3
- MD5 b089905e5cbc571045a45f806efb55d5
- SHA1 32e30cd23029f41044b1e1b159f9c625a97e7d4f
- SHA512 7e716f12f362078d304f3abb808f0b6ef07753a69c3c28e778ac72d11d7546156e5602e6782d6027b89f18009691d77c1a8bfc18377bc01f668e9ebed4daa211
- SSDEEP 12288:953VW1unIZES6WkxF5AXXZWVnJb3Nmdr3xM+LPLlBI1nXbEujN5PGM0c/:9lV6WWkM2nKdrhjLwXbEWN5+M0c/
- TLSH T1CDF4E164B3721FA9C4388675C66BBA9448663D510F30DCFF9AE913460F313E1A73AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.