Resubmissions

16-01-2022 12:57

220116-p6z8xafdg4 1

16-01-2022 12:54

220116-p48ghafdf7 10

General

  • Target

    b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b.exe

  • Size

    241KB

  • Sample

    220116-p48ghafdf7

  • MD5

    7120733f34bb6d7ccf174779d3058d3f

  • SHA1

    f2392bcadf03bc4c253a95199bf4be1947898255

  • SHA256

    b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b

  • SHA512

    c39778c1e678264c15f85db3b1628e3047375f0671bfa2d756efc053e74a7289f9bc5f5807c9e246e625bfe09bc3e9b8590a67fef2a0710032521225a693745e

Malware Config

Extracted

Family

jester

Botnet

FikusCode

C2

http://jesterdcuxzbey4xvlwwheoecpltru5be2mzuk4w7a7nrhckdjjhrbyd.onion/report/FikusCode

https://api.anonfiles.com/upload?token=d26d620842507144

Mutex

46378331-3729-449c-9a03-94f385d10a9c

Attributes
  • license_key

    D1F0DE359CBD562CCF9326AEEEA8E64E

Targets

    • Target

      b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b.exe

    • Size

      241KB

    • MD5

      7120733f34bb6d7ccf174779d3058d3f

    • SHA1

      f2392bcadf03bc4c253a95199bf4be1947898255

    • SHA256

      b06cd56bcb2a95ff2861a0257778e3a8911a7a47d81545138f1257a233267f0b

    • SHA512

      c39778c1e678264c15f85db3b1628e3047375f0671bfa2d756efc053e74a7289f9bc5f5807c9e246e625bfe09bc3e9b8590a67fef2a0710032521225a693745e

    • Jester

      Jester is an information stealer malware written in C#.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Tasks