0bb828415d561c17497945e8be37e088475267c98987bbbc8736a74d9b450926

Sharing

Copy URL

Twitter E-mail

General

Target

3d80b16656969cb190d7ea4067d7e467_JaffaCakes118
Size

634KB
Sample

241013-dsn3ya1aqr
MD5

3d80b16656969cb190d7ea4067d7e467
SHA1

648d870e95ca3bf9650434de07ad75f73a92a5d5
SHA256

0bb828415d561c17497945e8be37e088475267c98987bbbc8736a74d9b450926
SHA512

6dd90605ef99ae7d2e564815e7c449911e853e654557abccf2857b6736f532cea4f3b2dff5a836288c7ea26e0d6d4159637990c1743b71780c993aefa243dd5d
SSDEEP

12288:SFLgG4GjeZHkwuPikQ7lKH5p5H9x14eZHkwuli3QblKL5pFx3iRE:SF8G4GjeZEXi37l6Br14eZE9iAblIdhx

Score

7^/10

Malware Config

Targets

- Target
  
  3d80b16656969cb190d7ea4067d7e467_JaffaCakes118
- Size
  
  634KB
- MD5
  
  3d80b16656969cb190d7ea4067d7e467
- SHA1
  
  648d870e95ca3bf9650434de07ad75f73a92a5d5
- SHA256
  
  0bb828415d561c17497945e8be37e088475267c98987bbbc8736a74d9b450926
- SHA512
  
  6dd90605ef99ae7d2e564815e7c449911e853e654557abccf2857b6736f532cea4f3b2dff5a836288c7ea26e0d6d4159637990c1743b71780c993aefa243dd5d
- SSDEEP
  
  12288:SFLgG4GjeZHkwuPikQ7lKH5p5H9x14eZHkwuli3QblKL5pFx3iRE:SF8G4GjeZEXi37l6Br14eZE9iAblIdhx
Score

7^/10

adware discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  ffMediaWatchV1home1002chaction.js
- Size
  
  834B
- MD5
  
  38aea1c8ff62643f5a7b13ad40f65b3f
- SHA1
  
  5236170ab82be380ceb64f6ee1196532d75a1b43
- SHA256
  
  e73ff1b8b19d84505067184b4a0c1d82b860ff051deef5d3507fe86285681ca0
- SHA512
  
  87617589383765d250976576127024b933d8e4ad78daa148ca974f868736f5aa228bbfaf279422d85a38c1de2632c474c61c28efc088db68721cd4ba4b107149
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  ff/chrome/content/ffMediaWatchV1home1002.js
- Size
  
  747B
- MD5
  
  9c3198c93fd72c1a2b0cd8d7dd287f0e
- SHA1
  
  2f42f3a2d69f08fe935894937707cc3282e82255
- SHA256
  
  f533280cd869b57fd481f7fbbc4919a961bdff942df314ec4937a6841395fef9
- SHA512
  
  97366cd2780d134091a16f62b8b48b9276c945cdf27bbff9788bff719921d17879e14085f29d65223089b8f11fa9019128cc0b95f06342dda48501f9f9f474af
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  ff/chrome/content/ffMediaWatchV1home1002ffaction.js
- Size
  
  678B
- MD5
  
  f68c01cd87a034eaf24bc4adcdeb4042
- SHA1
  
  6cefc57ba5edfdc29bdf783e30f008fcc8cf1d4e
- SHA256
  
  58dc76cdb4e12245655177d7c78a143ab808691f36de6793e4959b6a2e05f593
- SHA512
  
  a095ac80696fd8bf72aa8a0213897713ddf038bbc8be54ea7c234d9f01de37ca903929eb43bf6a032db34f1d28ecef883ecc584a0e32afff61a3dbcf6aee3bfb
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  ie/MediaWatchV1home1002.dll
- Size
  
  85KB
- MD5
  
  e9cd82dbf49f801998c5edf6f99cab4f
- SHA1
  
  e6628b9fd3bcbbf0536ea2deed34764180bee9ee
- SHA256
  
  e3a4a8a09d58245ebb5ce0ef1ee89121e1be22eaf6f667cf14469c1587af6880
- SHA512
  
  c06b8a2fd364991cc6dfcf2197403607492dc5b01339e31c52b717fa8df59712231fc2dd68252572aba86348523397337e5d97b38e541f1e94fafb0cbfe4b598
- SSDEEP
  
  1536:f8/1CsEmka04RhRtahrOb8Dkh4aHA9glQGNBp:I12mka0ElahrOUaguaGNB
Score

6^/10

adware discovery stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral11 behavioral12
- Target
  
  uninstall.exe
- Size
  
  285KB
- MD5
  
  75410cffc7ea7264cdc791f3ec993ef1
- SHA1
  
  fa932dbd7e180b40ccfbda4523ffcd3a15b05293
- SHA256
  
  c3a83e08394871e3d4f059f038c6119ac0da11eb40e4bc4de36f5ea16b0d1984
- SHA512
  
  b7b53211570cc4940ecefaa2d733cf788717342da8e1793dd7e3722604728a858d581e9bdf0236a01d2c11351898f99d97dad9c75ab5c0723571c11fa52f604d
- SSDEEP
  
  6144:Ee34xZgpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1F:E+eZHkwuPikQ7lKH5p5H9x1F
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral15 behavioral16