MALICIOUS — b92cdb8729bd262753bb4fb91f258c606491fb8c4e9ee41156f8574ee10bceb8

MALICIOUS — b92cdb8729bd262753bb4fb91f258c606491fb8c4e9ee41156f8574ee10bceb8 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (89/100), attributed to the Juko family. 4 of 55 detection engines flagged it, exhibiting 2 ATT&CK techniques.

Identification

• SHA-256: b92cdb8729bd262753bb4fb91f258c606491fb8c4e9ee41156f8574ee10bceb8
• SHA-1: ca1f7b5f4533550f34d68742df6106d445116fd1
• MD5: 0238f8df1fa39d3113b1bdfca8db6b7d
• imphash: 170193414cc4abf0ae27dc2a19d74879
• ssdeep: 768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHp+:OLsF2Kerc64sTiX2IV0Dhu+
• TLSH: T14C2F396747309602F391A68B55403F4DB1B6A8EE3136C7518EE2B67E8BE045738B847C
• Submitted as: b92cdb8729bd262753bb4fb91f258c606491fb8c4e9ee41156f8574ee10bceb8
• File type: pe · Size: 32784 bytes
• Verdict: malicious (89/100) · Family: Juko

Detections (4 of 55 engines)

• ClamAV (daily): Win.Malware.Juko-9753236-0
• Microsoft Defender: flagged
• Emsisoft (Emergency Kit): Trojan.Downloader.JUKO
• Kaspersky (KVRT): HEUR:Trojan.Win32.SelfDel.gen

MITRE ATT&CK

• T1071.001
• T1057

Why this verdict

The malicious score of 89/100 is the fusion of 3 weighted signals:

• ClamAV (daily) flagged Win.Malware.Juko-9753236-0 (rule Win.Malware.Juko-9753236-0) - engine signal, weight 0.90, confidence 0.95
• communicate over HTTP (rule communicate over HTTP) - capa signal, weight 0.30, confidence 0.60
• enumerate processes (rule enumerate processes) - capa signal, weight 0.20, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

More Juko samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report