Overview

overview

8

Static

static

5

JGKWRU.exe

windows7_x64

8

JGKWRU.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    JGKWRU.exe
  • Size 1.5MB
  • Sample211118-d23bxsefb4
  • SHA256 3093fc14a0bb06b811cfd1551715b43f74fdbe75b179e27e44f737a2a1c7154c
  • MD5 SHA1 SHA512
Score
8/10
collectionspywarestealerupx

Malware Config

Targets

    • Target
      JGKWRU.exe
    • Size 1.5MB
    • SHA256 3093fc14a0bb06b811cfd1551715b43f74fdbe75b179e27e44f737a2a1c7154c
    • MD5 SHA1 SHA512
    Score
    8/10
    collectionspywarestealerupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook accounts

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks