Extracted

• • Target

    JaffaCakes118_9490a96656c76f667feb406d7a08c9a0a44eca1c8151ed6999000179549a92b1

  • Size

    519KB

  • MD5

    65ec3c266fbb29c78bd931faa10c7947

  • SHA1

    e5dfa9b4f41ad608b7cf26040a83ecbc4e4378af

  • SHA256

    9490a96656c76f667feb406d7a08c9a0a44eca1c8151ed6999000179549a92b1

  • SHA512

    8823e7eccbfa351e1fdf71a2f1c0a8430a37ce10bb3d11facf269408263a269c22fcccfd5cbf449693f894eccb780bf9f10f4f93248b506d641de098c6bab592

  • SSDEEP

    6144:rGiP8k7NOQlfIFvnqzp6uAH8PiIIDNvFSsEIxIfFMIgvcVWRYeciBMh0nn5mpU4r:YD8faqM8PpIDtz+v8Yefp+j2GMkgmT

  Score

  10^/10

  blustealerdiscoverystealer

  • BluStealer

    A Modular information stealer written in Visual Basic.

    stealerblustealer

  • Blustealer family

    blustealer

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/yenf.dll

  • Size

    72KB

  • MD5

    46c925d5eaaaf5a7cdd55ffc845d037c

  • SHA1

    df0fc5da0fd9a0d288abac007e2ce470911fe25d

  • SHA256

    649b6cf91616337859aa74ec46fbdcfed6859475bb689c49c84eafdf33f796ec

  • SHA512

    9e124847e59a37ad9c11fdd94e5a8e0b4e93a273c43daecf2d357c94ffb55387b7070b45af688566a9d762cb7ad78cd4412b84ff32892a6fb7c8a7c8c3d53373

  • SSDEEP

    1536:/f6RHirpM7t5P37QCIuAw8nMZxcZrIOIkGcFe2KRU8+TRbdGxJgUx:/CR2grMCxL7j+IBkmRU8+T

  Score

  3^/10

  discovery
  behavioral3behavioral4