General
- Target jetserr.exe
- Size 21.6MB
- Sample260817-s9nwtstflf
- SHA256 e0787352f07f66b708497d624ff571dcf639f0027f73d7034c9b161f271693a3
- MD5 44cfaf6b99ce453356392efa04a4549b
- SHA1 b30dc8aeb48a5e6188ce263daebebac4ac36a951
- SHA512 9057eeada0b0926f0865be99d72cc2cfa389c1855a4d9f286a0375772a0299e9dfb110581c8f0056fb3c557d9472897ac7f8d760cabdcd9a01216bd8be90dfef
- SSDEEP 393216:uqzlNIZ37UJ32eivEoxy8ejhPb1F9mpQXEAphVtnIUQSg+6FoIykz4dVtNPvF7dp:uqzbS4ce2s7lRvNRphDto+WoIygcVtld
- TLSH T1793733D47B4549BAE8EE0239B8D4D96793F274561FA0C2BB1BB00C2A0D776D4EE74B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jetserr.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jetserr.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
jetserr.pyc
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
jetserr.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jetserr.exe
- Size 21.6MB
- SHA256 e0787352f07f66b708497d624ff571dcf639f0027f73d7034c9b161f271693a3
- MD5 44cfaf6b99ce453356392efa04a4549b
- SHA1 b30dc8aeb48a5e6188ce263daebebac4ac36a951
- SHA512 9057eeada0b0926f0865be99d72cc2cfa389c1855a4d9f286a0375772a0299e9dfb110581c8f0056fb3c557d9472897ac7f8d760cabdcd9a01216bd8be90dfef
- SSDEEP 393216:uqzlNIZ37UJ32eivEoxy8ejhPb1F9mpQXEAphVtnIUQSg+6FoIykz4dVtNPvF7dp:uqzbS4ce2s7lRvNRphDto+WoIygcVtld
- TLSH T1793733D47B4549BAE8EE0239B8D4D96793F274561FA0C2BB1BB00C2A0D776D4EE74B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (66) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Loads dropped DLL
-
- Target jetserr.pyc
- Size 10KB
- SHA256 9270eb1b634fbfb6f93326e3ddc648c736ca7cdcc70d0b829bc744ff577a1127
- MD5 1523edbb92ea435da203676bf9dc3228
- SHA1 124180a3802014cc248574b0a0885a62bc31f124
- SHA512 1e5863f3662314094295b2d665359bc88f7ef1f337aae84c3cfe2dc14f6779dcd7c77b7c73019da1e167945744723dfad2409c3419851de6e84b8c5c83f7d366
- SSDEEP 192:sWZTZrUX+LHSaMtQZ/TPUp5xGsbYxGEpm:nrUOLmQZ745gsbYxGsm
- TLSH T16622F9B89DD5B03BFD68E17533F6E154B321C389B55A9707FA204CBC9D68A12561830F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10