435e26dc2571c48f92f6ea75b025f24a279c8a86b721f1e48434a6df412ba7a7

Sharing

Copy URL

Twitter E-mail

General

Target

124cb35fffe978c843ffcdf6f441c439_JaffaCakes118
Size

634KB
Sample

241004-hq1q6sthqa
MD5

124cb35fffe978c843ffcdf6f441c439
SHA1

e53e77855d715bb99dfabba40a3d8a5a5f2e3443
SHA256

435e26dc2571c48f92f6ea75b025f24a279c8a86b721f1e48434a6df412ba7a7
SHA512

8367ac2057187b122a13adddebbf8172655492e5114c1011e9a565122b33455b0b4b24e6696eea1efe52a675c569494ba26c12465a137743e768df163c9818eb
SSDEEP

12288:YI481MG4GjeZHkwuPikQ7lKH5p5H9x1/eZHkwuziDQBlKR5psxjlfU:Yi1MG4GjeZEXi37l6Br1/eZEriMBlm0I

Score

7^/10

Malware Config

Targets

- Target
  
  124cb35fffe978c843ffcdf6f441c439_JaffaCakes118
- Size
  
  634KB
- MD5
  
  124cb35fffe978c843ffcdf6f441c439
- SHA1
  
  e53e77855d715bb99dfabba40a3d8a5a5f2e3443
- SHA256
  
  435e26dc2571c48f92f6ea75b025f24a279c8a86b721f1e48434a6df412ba7a7
- SHA512
  
  8367ac2057187b122a13adddebbf8172655492e5114c1011e9a565122b33455b0b4b24e6696eea1efe52a675c569494ba26c12465a137743e768df163c9818eb
- SSDEEP
  
  12288:YI481MG4GjeZHkwuPikQ7lKH5p5H9x1/eZHkwuziDQBlKR5psxjlfU:Yi1MG4GjeZEXi37l6Br1/eZEriMBlm0I
Score

7^/10

adware discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  ffMediaWatchV1home3882chaction.js
- Size
  
  834B
- MD5
  
  a9b0d2ad9447e90c0b5f8e94417da8e3
- SHA1
  
  77308d94f5b4b301c39b5f618bea5b8c5e10bdee
- SHA256
  
  344a5899a527f6556ce64387eccc250d5c501a205e7556c51d0b27f8417ae225
- SHA512
  
  a9fa3787ed8f68cc5071815e7e39acadc2afc66007b1d5b4a83f6d92da2f9a4dd7908396a6e43cf3ff01ca52a36caf79a93759b28cf3150c6da7ebc3ac1463da
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  ff/chrome/content/ffMediaWatchV1home3882.js
- Size
  
  747B
- MD5
  
  65807cb4b7603d5c34acdb374709ce6a
- SHA1
  
  02d92baf821867def5889dc1192914a8d26b3d70
- SHA256
  
  354ae1bbf7b8d5ca4858c0d221f15f772b9e1b06b4b69b7cd8e04abe4f17c0ed
- SHA512
  
  d4353a0e60fc7c5efde1d5914dae6d3441c8005105e282d2b238b224d43c10fbc72110473e63735967c562213e5111468f1da5d4a2fce63b88ea117891b5c868
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  ff/chrome/content/ffMediaWatchV1home3882ffaction.js
- Size
  
  678B
- MD5
  
  32b062276e5ffc531b5316a6b9fa3c92
- SHA1
  
  3849af0054fd9ac519621b2ee386e1e1972c7872
- SHA256
  
  ae03cb9cede11258c2a12d293618c79b0f7857731bfa72597d6bd914042709af
- SHA512
  
  7484522e3819e55e27a41d602e0e635785954633ab812c7b58da03414a0a8584aa2b76d73ddf0a396d3e86d5ab25aac34f6fa04ebc99bc74b14f5eab6d95bf10
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  ie/MediaWatchV1home3882.dll
- Size
  
  85KB
- MD5
  
  d121be4ee5b461f93720042b9804ee2d
- SHA1
  
  4a2c2071520cb7ba80a4977b1fe5d21e6cc5dd33
- SHA256
  
  fc12e6330ef234709ea64fee46906f1973c62a6030aaef73661935f37eec1baa
- SHA512
  
  55c03190fe834676d4b5df8e832a9f7176b8603848227206958b00a2ea7721f146f2862cef6dc6aae504860cfe84559a5a4ea39d4e774fbae70b45e801dc0242
- SSDEEP
  
  1536:p8/1CsEmka04RhRtahrOb8DkhMkHA9glQYFdZ:i12mka0ElahrOQkguaYFd
Score

6^/10

adware discovery stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral11 behavioral12
- Target
  
  uninstall.exe
- Size
  
  285KB
- MD5
  
  d0f23148f77bbcb390b2682b1f2b25a4
- SHA1
  
  09a518970407d4c5a29871bbca3644b7ffb91ffc
- SHA256
  
  75539d384e86a40b8a58b2bf88fe2b5492f79a63b78ad28f03935f91fdc091a3
- SHA512
  
  77cd8de9d692c311f40a511f9967299417130246faa3b3cae2bc78c1d561d1a9f6c9feee6da86e34c14bc465e0aea2e56a8ef2ab2d35770b360418231a5af2a1
- SSDEEP
  
  6144:Ee343upeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x15:emeZHkwuPikQ7lKH5p5H9x15
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral15 behavioral16