7b8720eb5a1cce2169e13724d6e6b0c225a5e36208b8affe595fa774581fc91c

Sharing

Copy URL Twitter E-mail

General

Target

0cafeac3ec572feb8a27fc3279176f7f_JaffaCakes118
Size

634KB
Sample

241002-19jwwazgkq
MD5

0cafeac3ec572feb8a27fc3279176f7f
SHA1

16674461819539393257d368e46173c81c424087
SHA256

7b8720eb5a1cce2169e13724d6e6b0c225a5e36208b8affe595fa774581fc91c
SHA512

8167e85a1ac9975fbb86d7b85d350b70d81d60c1d3c32954487fa2180dad8d168d35396fbf9b0b828380416240c024317cd1e9f69a10eafdfa73e2142202065b
SSDEEP

12288:BHFOcG4GjeZHkwuPikQ7lKH5p5H9x1YeZHkwuriZQZlKh5pQxlMjVWH:BHF3G4GjeZEXi37l6Br1YeZEjiOZlWod

Score

7^/10

Malware Config

Targets

- Target
  
  0cafeac3ec572feb8a27fc3279176f7f_JaffaCakes118
- Size
  
  634KB
- MD5
  
  0cafeac3ec572feb8a27fc3279176f7f
- SHA1
  
  16674461819539393257d368e46173c81c424087
- SHA256
  
  7b8720eb5a1cce2169e13724d6e6b0c225a5e36208b8affe595fa774581fc91c
- SHA512
  
  8167e85a1ac9975fbb86d7b85d350b70d81d60c1d3c32954487fa2180dad8d168d35396fbf9b0b828380416240c024317cd1e9f69a10eafdfa73e2142202065b
- SSDEEP
  
  12288:BHFOcG4GjeZHkwuPikQ7lKH5p5H9x1YeZHkwuriZQZlKh5pQxlMjVWH:BHF3G4GjeZEXi37l6Br1YeZEjiOZlWod
Score

7^/10

adware discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  ffMediaWatchV1home84chaction.js
- Size
  
  824B
- MD5
  
  55a1cef298db09718d71e9ad8aee5bf2
- SHA1
  
  57a7cb6004b876458dd866292f28b2ea439924ce
- SHA256
  
  dc27fc8209a216f98f1e1054325f2bfaa5c64571873d0f93deec57b20dac150d
- SHA512
  
  d0c460ba7a23601f0396eda925f30b64d7f002aa4f0be68e3292c3692288e736c77448c98098783a4474f5644c6c14e55636671ca21b37d0d532fb61f56c5551
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  ff/chrome/content/ffMediaWatchV1home84.js
- Size
  
  741B
- MD5
  
  f34f8c0c55a6935d1c3d0b17d1d3eee3
- SHA1
  
  12920c07d0aa1196424bcbb5f48eb391b20e8fe6
- SHA256
  
  f72113a4b820d36d1f220dcd557fd97a001f3e61fdae8a52d305d89635862d46
- SHA512
  
  0eabbf2890ba231997abea6fbb1bf68d918d79856ff762e07ee353baf19a0fccedc8e670ae774d49832e9d7fc606034e9cd95665c291197b98ae195ba63f628b
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  ff/chrome/content/ffMediaWatchV1home84ffaction.js
- Size
  
  670B
- MD5
  
  11e31e6f7176bbbcb2c8fdae551f7f33
- SHA1
  
  02d10b6c2ee8c58a416c01becef02dc9a9b0e784
- SHA256
  
  85fe3bee71d41986ba3c39cc2d2689b8f41860088dd663d688644f0a83f72258
- SHA512
  
  1d5351dc85bf83fc8c1f5e5080f1c2f7415eb12d03fc15f938e6bbe53af93aec7ad1f51ec65958582b52d9660d60f7004e211470a22c97ff83a2f2501a9cd46f
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  ie/MediaWatchV1home84.dll
- Size
  
  85KB
- MD5
  
  15246ad0d1550a9b0339c84e2cdbedb6
- SHA1
  
  1615a8335a2e7c5a517c04666127fefd4c3ba130
- SHA256
  
  03d04d58cc1bd74ff5e206ecb9643db75c485a21a6f9aed2ecb4d65eab0c1080
- SHA512
  
  a7099ea9d5048185b69460b7718600c6bcfb46b1346ad530c0054660ea640027a44eb8283576632a6e277e55a6819f19ed9399c6a8af9c0db963782f00f29b71
- SSDEEP
  
  1536:iy/YCsh1Eb2VGAtK7gjzAcTkWG3aXbxlQsTjm:HYT1Eb2VGOK76z23arxasTj
Score

6^/10

adware discovery stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral11 behavioral12
- Target
  
  uninstall.exe
- Size
  
  285KB
- MD5
  
  4bc7a31a2c1a5af475e9b8b18418f1bf
- SHA1
  
  a2a1e5f6b819c827d4e4cf6442678cfdbae51775
- SHA256
  
  25baa1596254298d77951f48366a5cc6f7782a1bab05f083ceeb54bb30d9afd8
- SHA512
  
  2296fe0b8c71827f89ffd6c55865598208d3aa200040dfab815cbabc1c86a3750379e6419683ec07984d19aaf1afdf9dbe4388b3d735f025cca01c1d47e5bb24
- SSDEEP
  
  6144:Ee34i+peZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1T:LWeZHkwuPikQ7lKH5p5H9x1T
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral15 behavioral16