c6fc72284a7ed951f7fd4678e900643581c2ba0259b344613e05c2d9ae626ce5

Sharing

Copy URL

Twitter E-mail

General

Target

0eaedf5c197a8e9de22eaece9126ec49_JaffaCakes118
Size

634KB
Sample

241003-jspmcswerh
MD5

0eaedf5c197a8e9de22eaece9126ec49
SHA1

4b97b39c0263326fe2eb7b5477ef13da4db8633c
SHA256

c6fc72284a7ed951f7fd4678e900643581c2ba0259b344613e05c2d9ae626ce5
SHA512

8d2978a066ff745ebbd1284dbe2171ead9b1adb0b9173306beb45f5d4127e606a147e4eaa8f76bf6026cd44df88e39bb359d85049fc586ddb4d47b1ce2495763
SSDEEP

12288:TFBBh0Nr4LUG4GjeZHkwuPikQ7lKH5p5H9x1feZHkwuli3QblKL5pFx3iRT:TFBb0l4YG4GjeZEXi37l6Br1feZE9iAR

Score

7^/10

Malware Config

Targets

- Target
  
  0eaedf5c197a8e9de22eaece9126ec49_JaffaCakes118
- Size
  
  634KB
- MD5
  
  0eaedf5c197a8e9de22eaece9126ec49
- SHA1
  
  4b97b39c0263326fe2eb7b5477ef13da4db8633c
- SHA256
  
  c6fc72284a7ed951f7fd4678e900643581c2ba0259b344613e05c2d9ae626ce5
- SHA512
  
  8d2978a066ff745ebbd1284dbe2171ead9b1adb0b9173306beb45f5d4127e606a147e4eaa8f76bf6026cd44df88e39bb359d85049fc586ddb4d47b1ce2495763
- SSDEEP
  
  12288:TFBBh0Nr4LUG4GjeZHkwuPikQ7lKH5p5H9x1feZHkwuli3QblKL5pFx3iRT:TFBb0l4YG4GjeZEXi37l6Br1feZE9iAR
Score

7^/10

adware discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  ffMediaWatchV1home4624chaction.js
- Size
  
  834B
- MD5
  
  08ff77f1e160f2fb51536a94796d4082
- SHA1
  
  f06bfca8e22930f2235ceb7c178b9b68c055e060
- SHA256
  
  7fdfc62f4a85682e6111f56efce6c7a0cec02930ad7693082012464abd358435
- SHA512
  
  7add87523ef6a1e371a053a7454e4840c7be4f64ffa5ef42dfa6569f8ed843242a7488ad8553ddc5d683de7e896b23af0d61509f7c1810249fb56fc307750471
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  ff/chrome/content/ffMediaWatchV1home4624.js
- Size
  
  747B
- MD5
  
  b711d6030d1f0e89817e8c5332448f2b
- SHA1
  
  474ddca9db93826786c6fb5fd6ddf8bcf816be6d
- SHA256
  
  ae6c4e4cd1c3ddad84ed5c8ece03f183578b5b42eefba1d7ab9bf280cbf6031a
- SHA512
  
  516eb3c68e044e0f9346f3538b2c0cce90ff266eb1f9068bcadc96c94b83a5f6c22885d7a9cb9dd0c15eff2dc694158bbf57b3fef3e810ea293f9be669365206
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  ff/chrome/content/ffMediaWatchV1home4624ffaction.js
- Size
  
  678B
- MD5
  
  f070d1140d794a0b4a83b24aacd81d43
- SHA1
  
  7d86100ad4645562714430a3eec61f02dde355a8
- SHA256
  
  daf32f9e9a811e418aeb7be16bfadbf729e68b17d6fee0f223c55a2386b9454f
- SHA512
  
  e020606c2cd17a1fabb1544ba19fd000fee43681358873832d0fd270635a0f1bbbe0b92f57723c302afd5a1eadac1d7b99b397518296415bd053696c34399f9f
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  ie/MediaWatchV1home4624.dll
- Size
  
  85KB
- MD5
  
  1a792d0b82e1c129e024bf2c49afcd48
- SHA1
  
  4f4427483cd2b0b204c7dac6e80a537c30d34781
- SHA256
  
  17568d39a1dae4a6e187235d48234d1f2acb97dc14a27d975428d51c38f82140
- SHA512
  
  da9a44d77620fc02c4fb5f9c88ef0a9e76d19b66fc8dac60c4dd0afaac2461b5a6cc117355e766f107317b6e9ab65c8da82dd4b0f649009c9794a183672d3ef8
- SSDEEP
  
  1536:m8/1CsEmka04RhRtahrOb8Dkhf+HA9glQ7/dx:h12mka0ElahrOz+gua7/d
Score

6^/10

adware discovery stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral11 behavioral12
- Target
  
  uninstall.exe
- Size
  
  285KB
- MD5
  
  a26975d733f4a416d679461b63fb3935
- SHA1
  
  e78442e64da558c51026e189c9c3855dff5a1c8b
- SHA256
  
  819f8a1aa3355c4c8b548e9c4eebe4e70ae3e023e6596ade64b0348c394bf73f
- SHA512
  
  eb1d77b89973528b62e8ceb64cdca9e19e16f6292682f432afa7be18ab1f4759ce29d9e08f4ca0dcc27e37931cc3b6b3b8031e96a5da05db677ab619a832eb61
- SSDEEP
  
  6144:Ee34EGpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1l:xOeZHkwuPikQ7lKH5p5H9x1l
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral15 behavioral16