Overview
overview
3Static
static
11p-filters.html
windows7-x64
11p-filters.html
windows10-2004-x64
13p-filters.html
windows7-x64
13p-filters.html
windows10-2004-x64
1about.html
windows7-x64
1about.html
windows10-2004-x64
1asset-viewer.html
windows7-x64
1asset-viewer.html
windows10-2004-x64
1assets/scr...ipt.js
windows7-x64
3assets/scr...ipt.js
windows10-2004-x64
3assets/scr...ead.js
windows7-x64
3assets/scr...ead.js
windows10-2004-x64
3assets/scr...ite.js
windows7-x64
3assets/scr...ite.js
windows10-2004-x64
3assets/scr...rtc.js
windows7-x64
3assets/scr...rtc.js
windows10-2004-x64
3assets/thi...st.ps1
windows7-x64
3assets/thi...st.ps1
windows10-2004-x64
3assets/thi...de.ps1
windows7-x64
3assets/thi...de.ps1
windows10-2004-x64
3assets/thi...s/1.js
windows7-x64
3assets/thi...s/1.js
windows10-2004-x64
3assets/thi.../13.js
windows7-x64
3assets/thi.../13.js
windows10-2004-x64
3assets/thi.../14.js
windows7-x64
3assets/thi.../14.js
windows10-2004-x64
3assets/thi...ist.js
windows7-x64
3assets/thi...ist.js
windows10-2004-x64
3assets/thi...s/3.js
windows7-x64
3assets/thi...s/3.js
windows10-2004-x64
3assets/thi...s/4.js
windows7-x64
3assets/thi...s/4.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
1p-filters.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1p-filters.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
3p-filters.html
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
3p-filters.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
about.html
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
about.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
asset-viewer.html
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
asset-viewer.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
assets/scriptlets/abort-current-inline-script.js
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
assets/scriptlets/abort-current-inline-script.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
assets/scriptlets/abort-on-property-read.js
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
assets/scriptlets/abort-on-property-read.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
assets/scriptlets/abort-on-property-write.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
assets/scriptlets/abort-on-property-write.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
assets/scriptlets/nowebrtc.js
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
assets/scriptlets/nowebrtc.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
assets/thirdparties/easylist-downloads.adblockplus.org/easylist.ps1
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
assets/thirdparties/easylist-downloads.adblockplus.org/easylist.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
assets/thirdparties/easylist-downloads.adblockplus.org/easylist_noelemhide.ps1
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
assets/thirdparties/easylist-downloads.adblockplus.org/easylist_noelemhide.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/1.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/1.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/13.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/13.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/14.js
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/14.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/2_without_easylist.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/2_without_easylist.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/3.js
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/3.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/4.js
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/4.js
Resource
win10v2004-20240426-en
General
-
Target
5024afa21c4e15ace8d1debe0b0aeaf5_JaffaCakes118
-
Size
8.6MB
-
MD5
5024afa21c4e15ace8d1debe0b0aeaf5
-
SHA1
cfb22993603359b5f559fdcd4f1efe858806aec5
-
SHA256
d79a3dda806af5fd150a5fb6701856c5fc3ebec3fc87332e29f15a0cc3bc571f
-
SHA512
601c308154f969db84c45f92448231eb2575a49d7557a90ddd2e4fbf794ae6436a4cd2025de1024332e916d5d0a01570de917f3983641c49d63918d559633651
-
SSDEEP
196608:6ELrO/mgdPxcy1MEVkfZU7+qZFskRj7tH9Smrl:6AqucPi2NVkfO2k97t7l
Malware Config
Signatures
Files
-
5024afa21c4e15ace8d1debe0b0aeaf5_JaffaCakes118.zip
-
1p-filters.html.html
-
3p-filters.html.html
-
LICENSE.txt
-
META-INF/cose.manifest
-
META-INF/cose.sig
-
META-INF/manifest.mf
-
META-INF/mozilla.rsa
-
META-INF/mozilla.sf
-
_locales/ar/messages.json
-
_locales/bg/messages.json
-
_locales/ca/messages.json
-
_locales/cs/messages.json
-
_locales/da/messages.json
-
_locales/de/messages.json
-
_locales/el/messages.json
-
_locales/en/messages.json
-
_locales/en_GB/messages.json
-
_locales/es/messages.json
-
_locales/et/messages.json
-
_locales/fa/messages.json
-
_locales/fi/messages.json
-
_locales/fil/messages.json
-
_locales/fr/messages.json
-
_locales/fy/messages.json
-
_locales/he/messages.json
-
_locales/hi/messages.json
-
_locales/hr/messages.json
-
_locales/hu/messages.json
-
_locales/id/messages.json
-
_locales/it/messages.json
-
_locales/ja/messages.json
-
_locales/ko/messages.json
-
_locales/lt/messages.json
-
_locales/lv/messages.json
-
_locales/mr/messages.json
-
_locales/nb/messages.json
-
_locales/nl/messages.json
-
_locales/no/messages.json
-
_locales/pl/messages.json
-
_locales/pt_BR/messages.json
-
_locales/pt_PT/messages.json
-
_locales/ro/messages.json
-
_locales/ru/messages.json
-
_locales/sk/messages.json
-
_locales/sl/messages.json
-
_locales/sq/messages.json
-
_locales/sr/messages.json
-
_locales/sv/messages.json
-
_locales/te/messages.json
-
_locales/tr/messages.json
-
_locales/uk/messages.json
-
_locales/vi/messages.json
-
_locales/zh_CN/messages.json
-
_locales/zh_TW/messages.json
-
about.html.html
-
asset-viewer.html.html
-
assets/.DS_Store
-
assets/checksums.txt
-
assets/english.txt
-
assets/scriptlets/.DS_Store
-
assets/scriptlets/abort-current-inline-script.js.js
-
assets/scriptlets/abort-on-property-read.js.js
-
assets/scriptlets/abort-on-property-write.js.js
-
assets/scriptlets/nowebrtc.js.js
-
assets/thirdparties/.DS_Store
-
assets/thirdparties/adblock-latvian/latvian-list.txt
-
assets/thirdparties/adblock.gardar.net/is.abp.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/.DS_Store
-
assets/thirdparties/easylist-downloads.adblockplus.org/Liste_AR.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/advblock.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/bitblock.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/easylist.txt.ps1
-
assets/thirdparties/easylist-downloads.adblockplus.org/easylist_noelemhide.txt.ps1
-
assets/thirdparties/easylist-downloads.adblockplus.org/easylistchina.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/easylistdutch.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/easylistgermany.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/easylistitaly.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/easylistspanish.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/easyprivacy.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/exceptionrules.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/fanboy-annoyance.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/fanboy-social.txt
-
assets/thirdparties/easylist-downloads.adblockplus.org/liste_fr.txt
-
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/1.txt.js
-
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/13.txt.js
-
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/14.txt.js
-
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/2_without_easylist.txt.js
-
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/3.txt.js
-
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/4.txt.js
-
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/7.txt.js
-
assets/thirdparties/filters.adtidy.org/extension/ublock/filters/9.txt.js
-
assets/thirdparties/gitcdn.xyz/.DS_Store
-
assets/thirdparties/gitcdn.xyz/adblock-iran/filter.txt
-
assets/thirdparties/hosts-file.net/ad-servers
-
assets/thirdparties/margevicius.lt/easylistlithuania.txt
-
assets/thirdparties/mirror1.malwaredomains.com/files/.DS_Store
-
assets/thirdparties/mirror1.malwaredomains.com/files/README.md
-
assets/thirdparties/mirror1.malwaredomains.com/files/justdomains
-
assets/thirdparties/pgl.yoyo.org/as/README.md
-
assets/thirdparties/pgl.yoyo.org/as/serverlist
-
assets/thirdparties/publicsuffix.org/list/effective_tld_names.dat
-
assets/thirdparties/raw.githubusercontent.com/.DS_Store
-
assets/thirdparties/raw.githubusercontent.com/DandelionSprout/.DS_Store
-
assets/thirdparties/raw.githubusercontent.com/DandelionSprout/adfilt/NorwegianList.txt.js
-
assets/thirdparties/raw.githubusercontent.com/EasyListHebrew/master/EasyListHebrew.txt
-
assets/thirdparties/raw.githubusercontent.com/Frellwits-filter-lists/Frellwits-Swedish-Filter.txt
-
assets/thirdparties/raw.githubusercontent.com/ROad-Block/road-block-filters-light.txt
-
assets/thirdparties/raw.githubusercontent.com/Spam404/.DS_Store
-
assets/thirdparties/raw.githubusercontent.com/Spam404/lists/adblock-list.txt
-
assets/thirdparties/raw.githubusercontent.com/YousList/youslist.txt
-
assets/thirdparties/raw.githubusercontent.com/abp-filters-anti-cv/english.txt.js
-
assets/thirdparties/raw.githubusercontent.com/abpvn/abpvn.txt
-
assets/thirdparties/raw.githubusercontent.com/adblock-korea-contrib/filter.txt
-
assets/thirdparties/raw.githubusercontent.com/adblock-nocoin-list/nocoin.txt
-
assets/thirdparties/raw.githubusercontent.com/cjx82630/cjxlist/.DS_Store
-
assets/thirdparties/raw.githubusercontent.com/cjx82630/cjxlist/cjxlist.txt
-
assets/thirdparties/raw.githubusercontent.com/easylist-thailand/easylist-thailand.txt
-
assets/thirdparties/raw.githubusercontent.com/finnish-easylist-addition/Finland_adb.txt
-
assets/thirdparties/raw.githubusercontent.com/gioxx/filtri.txt
-
assets/thirdparties/raw.githubusercontent.com/indonesianadblockrules/.DS_Store
-
assets/thirdparties/raw.githubusercontent.com/indonesianadblockrules/subscriptions/abpindo.txt.js
-
assets/thirdparties/raw.githubusercontent.com/k2jp/abp-japanese-filters/master/abp_jp.txt
-
assets/thirdparties/raw.githubusercontent.com/polish-adblock-filters/adblock.txt
-
assets/thirdparties/raw.githubusercontent.com/polish-privacy-filters/anti-adblock.txt.js
-
assets/thirdparties/raw.githubusercontent.com/szpeter80/hufilter/master/hufilter.txt
-
assets/thirdparties/raw.githubusercontent.com/tomasko126/easylistczechandslovak/master/filters.txt
-
assets/thirdparties/s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt
-
assets/thirdparties/secure.fanboy.co.nz/fanboy-cookiemonster.txt
-
assets/thirdparties/someonewhocares.org/hosts/hosts
-
assets/thirdparties/stanev.org/abp/adblock_bg.txt
-
assets/thirdparties/winhelp2002.mvps.org/hosts.txt
-
assets/thirdparties/www.fanboy.co.nz/enhancedstats.txt
-
assets/thirdparties/www.fanboy.co.nz/fanboy-antifacebook.txt
-
assets/thirdparties/www.fanboy.co.nz/fanboy-korean.txt
-
assets/thirdparties/www.fanboy.co.nz/fanboy-swedish.txt
-
assets/thirdparties/www.fanboy.co.nz/fanboy-ultimate.txt.ps1
-
assets/thirdparties/www.fanboy.co.nz/fanboy-vietnam.txt
-
assets/thirdparties/www.malwaredomainlist.com/hostslist/README.md
-
assets/thirdparties/www.malwaredomainlist.com/hostslist/hosts.txt
-
assets/thirdparties/www.void.gr/kargig/void-gr-filters.txt
-
assets/ublock/filter-lists.json
-
assets/ublock/filters.txt
-
assets/ublock/mirror-candidates.txt
-
assets/ublock/privacy.txt
-
background.html.html
-
css/1p-filters.css
-
css/3p-filters.css.vbs
-
css/about.css
-
css/common.css
-
css/dashboard-common.css
-
css/dashboard.css
-
css/devtool-log.css
-
css/devtools.css
-
css/dyna-rules.css
-
css/popup.css
-
css/whitelist.css
-
dashboard.html.html
-
devtool-log.html.html
-
devtools.html.html
-
dyna-rules.html.html
-
epicker.html.html
-
img/.DS_Store
-
img/browsericons/icon19-off.png.png
-
img/browsericons/icon19.png.png
-
img/browsericons/icon38-off.png.png
-
img/browsericons/icon38.png.png
-
img/help16.png.png
-
img/icon_128.png.png
-
img/icon_16.png.png
-
img/icons.svg
-
js/.DS_Store
-
js/1p-filters.js.js
-
js/3p-filters.js.js
-
js/about.js.js
-
js/asset-viewer.js.js
-
js/assets.js.js
-
js/async.js.js
-
js/background.js.js
-
js/contentscript-end.js.js
-
js/contentscript-start.js.js
-
js/contextmenu.js.js
-
js/cosmetic-filtering.js.js
-
js/cosmetic-logger.js.js
-
js/dashboard-common.js.js
-
js/dashboard.js.js
-
js/devtool-log.js.js
-
js/devtools.js.js
-
js/dyna-rules.js.js
-
js/dynamic-net-filtering.js.js
-
js/element-picker.js.js
-
js/i18n.js.js
-
js/logger.js.js
-
js/messaging.js.js
-
js/mirrors.js.js
-
js/options_ui.js.js
-
js/pagestore.js.js
-
js/polyfill.js.js
-
js/popup.js.js
-
js/profiler.js.js
-
js/settings.js.js
-
js/start.js.js
-
js/static-net-filtering.js.js
-
js/stats.js.js
-
js/storage.js.js
-
js/subscriber.js.js
-
js/tab.js.js
-
js/traffic.js.js
-
js/ublock.js.js
-
js/udom.js.js
-
js/uritools.js.js
-
js/utils.js.js
-
js/vapi-background.js.js
-
js/vapi-client.js.js
-
js/vapi-common.js.js
-
js/vapi-popup.js
-
js/whitelist.js.js
-
lib/publicsuffixlist.js.js
-
lib/punycode.js.js
-
lib/yamd5.js.js
-
manifest.json
-
options_ui.html.html
-
popup.html
-
settings.html.html
-
whitelist.html.html