General

  • Target
    jetserr.exe
  • Size 21.6MB
  • Sample260817-s9nwtstflf
  • SHA256 e0787352f07f66b708497d624ff571dcf639f0027f73d7034c9b161f271693a3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jetserr.exe
    • Size 21.6MB
    • SHA256 e0787352f07f66b708497d624ff571dcf639f0027f73d7034c9b161f271693a3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Renames multiple (66) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Target
      jetserr.pyc
    • Size 10KB
    • SHA256 9270eb1b634fbfb6f93326e3ddc648c736ca7cdcc70d0b829bc744ff577a1127
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks