Extracted

• • Target

    JaffaCakes118_99f8d45504bc7a0b44dd1b1e9e140d20

  • Size

    981KB

  • MD5

    99f8d45504bc7a0b44dd1b1e9e140d20

  • SHA1

    d342f4bd98b3d0abe43d7efbf09563f95706f71b

  • SHA256

    1d78c999f43239d13a70f0ce1999562cd860518d67f5b5e408378182b2ec9241

  • SHA512

    1e9321e0a3268a7edc47250b6bca20d9a2acd5735862ecf68dbf37ee66e5ae4431c63faf824ffd0e19920f9a5cba29c2f916093233de605670b90fe7a76e8940

  • SSDEEP

    24576:grnXGG1qtW4BFOyIK1lC+7hvMVwT3dq+/QIt5F0Qm4kWiR+rvQWl:WnWx1OG1EKtM2T3mIPk4lioBl

  Score

  10^/10

  growtopiadiscoveryspywarestealer

  • Growtopia

    Growtopa is an opensource modular stealer written in C#.

    stealergrowtopia

  • Growtopia family

    growtopia

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2