38c4146af9972c6f781c81cb5f130944a52e976fc40e7752ccaf66908b4a9308

Sharing

Copy URL Twitter E-mail

General

Target

3ddb6a87f6c1b9879bb7a1ecb5ce6a6d_JaffaCakes118
Size

634KB
Sample

241013-fcdndazclf
MD5

3ddb6a87f6c1b9879bb7a1ecb5ce6a6d
SHA1

bfd8c5c73300a8103bfe807c0a7d7bcf230dcacb
SHA256

38c4146af9972c6f781c81cb5f130944a52e976fc40e7752ccaf66908b4a9308
SHA512

d54f07578c9fe6249a344dbff25ea01a45704eed0177b7e8e87642660d3d166d04dc09250aa89a51769c8168a6e8598e1a2c2faf475bc76277a626ddc8d76f02
SSDEEP

12288:CPm1sG4GjeZHkwuPikQ7lKH5p5H9x1UeZHkwu7iDQ7lKR5pUxDlfj:CwsG4GjeZEXi37l6Br1UeZETiM7lu8N1

Score

7^/10

Malware Config

Targets

- Target
  
  3ddb6a87f6c1b9879bb7a1ecb5ce6a6d_JaffaCakes118
- Size
  
  634KB
- MD5
  
  3ddb6a87f6c1b9879bb7a1ecb5ce6a6d
- SHA1
  
  bfd8c5c73300a8103bfe807c0a7d7bcf230dcacb
- SHA256
  
  38c4146af9972c6f781c81cb5f130944a52e976fc40e7752ccaf66908b4a9308
- SHA512
  
  d54f07578c9fe6249a344dbff25ea01a45704eed0177b7e8e87642660d3d166d04dc09250aa89a51769c8168a6e8598e1a2c2faf475bc76277a626ddc8d76f02
- SSDEEP
  
  12288:CPm1sG4GjeZHkwuPikQ7lKH5p5H9x1UeZHkwu7iDQ7lKR5pUxDlfj:CwsG4GjeZEXi37l6Br1UeZETiM7lu8N1
Score

7^/10

adware discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  ffMediaWatchV1home3167chaction.js
- Size
  
  834B
- MD5
  
  0621970460a161349448eec1dc2715b3
- SHA1
  
  2c463e9e42a850c993a22d01b0e2b1e2dc10cb3b
- SHA256
  
  7ef6aa1ffc988e11f9858299e1a88cce5b4774500562954837d5b6904c774f14
- SHA512
  
  0c801ad0a82471933c3f2f421f919ce01a9aa3fcb4ee11622ddbc161a4d9055047a62d2a32dcd96fbb5de7b5654185adb63b23bc86f311ad17831305a35cbf2e
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  ff/chrome/content/ffMediaWatchV1home3167.js
- Size
  
  747B
- MD5
  
  4639c0f9693c496ddef1394618d2280a
- SHA1
  
  7068e2a4f724f98429e93406fdbf6ad0d590700a
- SHA256
  
  06ae65263b19661ef86a992d1ee6a6645bfb8ce95f9288bb756435514103e8f8
- SHA512
  
  30460629e6c5c0e51ec4d176dedd35ca554634e62d3e2dc7a7376c41c4295a700dd0ebf86052a49429db497ddd7ca8ced7512e1adb4c835797d111b7e77c43f2
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  ff/chrome/content/ffMediaWatchV1home3167ffaction.js
- Size
  
  678B
- MD5
  
  99f9bb55af26d2891c258f7089bbbbe4
- SHA1
  
  8a959ce0a6629de4376f736caa9fb6986ccf1ed5
- SHA256
  
  df4dcbf7bfedf88b4ad8868770b1c2403436c15be03adfc2d595589e0d61fc07
- SHA512
  
  ceaa2e1a61f2e7171ad3c7ad5819676f918aa105f06dab42d4eb0e2b9fbdc4b7a2259856be038e815deee66fa9de2126a034748b0741f94f02209434ef8bf7d5
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  ie/MediaWatchV1home3167.dll
- Size
  
  85KB
- MD5
  
  096d1d131f4bf8c8bb4a8f68514975d9
- SHA1
  
  16a5875776c4b3d9031df8bd55870a7c0468ed63
- SHA256
  
  59fad37ffee9af5378f1d7847b16ce4bfe611578b627e27d8c663aef59a1a9a9
- SHA512
  
  0040aa30bb239780b236dbc8dc875ee8b27bcf4af6688b107d91ee0dea352b64a20a7e0df7799bb7dbbb6bf6311a505b2b3dda42825286819b8f668f28e8a851
- SSDEEP
  
  1536:q8/1CsEmka04R5RtahrOb8DkhleHA9glQLF4p:F12mka0EtahrOZeguaLF4
Score

6^/10

adware discovery stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral11 behavioral12
- Target
  
  uninstall.exe
- Size
  
  285KB
- MD5
  
  4851bd4633b39183bf6e5f2efa5b04d4
- SHA1
  
  1a3d31735a816597a6617c9f6cbb1fc60db3a5fa
- SHA256
  
  93ad5581ead8ae1b5a42377ac8011f132cf1034606567851e4e4280af4c4be61
- SHA512
  
  c375d8124663ceae89c95ee05aac1ae9f8e9312f1af6489f5a8c452ccf71b9826331c7b683995b6bbd0b3ccfe111c9341d4590185e6cede808d1f1d674767620
- SSDEEP
  
  6144:Ee34BqpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1g:UaeZHkwuPikQ7lKH5p5H9x1g
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral15 behavioral16