Extracted

• • Target

    JaffaCakes118_9a59826dd40bd1f0b99d17f491c9edf0

  • Size

    72KB

  • MD5

    9a59826dd40bd1f0b99d17f491c9edf0

  • SHA1

    ca7c4cf0cd68cdfc554f85eae3458d41c30803ae

  • SHA256

    1cf2d64cec52ea1623a6c2bf2e4307447c2e55c907987e75d61ed67518931639

  • SHA512

    54ee814da1fca0f4dfd7a3701682b3e8579c634ce49106475ea001e41af375e2009c66321eadc9b199ec8869f68316adaa4c45cd8fea6c75432671d707077385

  • SSDEEP

    1536:d6BZmQUwMI6Wf7CiIeeRvOtOfilxsXZ/3VmYhu:d6rmQUwMI72iiR4l+XfXhu

  Score

  10^/10

  spywarestealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1