Overview
overview
7Static
static
33e59438afa...18.exe
windows7-x64
73e59438afa...18.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3ffMediaWat...ion.js
windows7-x64
3ffMediaWat...ion.js
windows10-2004-x64
3ff/chrome/...421.js
windows7-x64
3ff/chrome/...421.js
windows10-2004-x64
3ff/chrome/...ion.js
windows7-x64
3ff/chrome/...ion.js
windows10-2004-x64
3ie/MediaWa...21.dll
windows7-x64
6ie/MediaWa...21.dll
windows10-2004-x64
6uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3General
-
Target
3e59438afa264dc64a6841419ac2924a_JaffaCakes118
-
Size
634KB
-
Sample
241013-hd166stcqg
-
MD5
3e59438afa264dc64a6841419ac2924a
-
SHA1
f15ab111fe974454da36d28b1e95ff5e8010984f
-
SHA256
cefbf67d0bfd8da3ca685561909fa1f46cbfc5104576312acbc199c8e7dda442
-
SHA512
f53432758cc9bd80599f74ac7c82f1aa06fa71821c0c6c905f6b14ec2e1655a54ae7b31445a5ec1753252df9ef2c1754642ad1796d8a681088ee5950d6834de5
-
SSDEEP
12288:Z8e85wzVtcG4GjeZHkwuPikQ7lKH5p5H9x1ReZHkwutifQ/lK15ppxlAlfh:Z8e86R6G4GjeZEXi37l6Br1ReZEFi4/f
Static task
static1
Behavioral task
behavioral1
Sample
3e59438afa264dc64a6841419ac2924a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e59438afa264dc64a6841419ac2924a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
ffMediaWatchV1home421chaction.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
ffMediaWatchV1home421chaction.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
ff/chrome/content/ffMediaWatchV1home421.js
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
ff/chrome/content/ffMediaWatchV1home421.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
ff/chrome/content/ffMediaWatchV1home421ffaction.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
ff/chrome/content/ffMediaWatchV1home421ffaction.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
ie/MediaWatchV1home421.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
ie/MediaWatchV1home421.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
3e59438afa264dc64a6841419ac2924a_JaffaCakes118
-
Size
634KB
-
MD5
3e59438afa264dc64a6841419ac2924a
-
SHA1
f15ab111fe974454da36d28b1e95ff5e8010984f
-
SHA256
cefbf67d0bfd8da3ca685561909fa1f46cbfc5104576312acbc199c8e7dda442
-
SHA512
f53432758cc9bd80599f74ac7c82f1aa06fa71821c0c6c905f6b14ec2e1655a54ae7b31445a5ec1753252df9ef2c1754642ad1796d8a681088ee5950d6834de5
-
SSDEEP
12288:Z8e85wzVtcG4GjeZHkwuPikQ7lKH5p5H9x1ReZHkwutifQ/lK15ppxlAlfh:Z8e86R6G4GjeZEXi37l6Br1ReZEFi4/f
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -
-
-
Target
ffMediaWatchV1home421chaction.js
-
Size
829B
-
MD5
108029fc590250f02ac835b58bc5aa19
-
SHA1
0fca2e471079c3be89d9377b1b3b82c18115659d
-
SHA256
0da93f3cc2b642c36c9c6dd929ebceb81c358ab2091ce85c9f2e7b9ae65d576b
-
SHA512
24f27b1c7e54372b5fff9d8fd85f24ae46730ac3897197437d796e449581f79fde39a4ca6908debcfba7bbf43eaa355fd40788f4df69ebaa9f61a170ccae7519
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home421.js
-
Size
744B
-
MD5
1441bcaeec3d073e81d84aff6ef5a9d9
-
SHA1
ff9a8bbff5c7ab3fe9500e28e08b13b4b17770d0
-
SHA256
6435153a2b39e50ad52a627c83aa95fa1159299cfbe43c6d1c9ef590cff0d0c4
-
SHA512
fbf2ef00819e0e122dacd1505984142d061f29a2d27d53a864836a6f2b55246c183e8dce6e1102b8ceee65660ac11390f4cc2ec71684e2f9e54fa599a6fd5a91
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home421ffaction.js
-
Size
674B
-
MD5
22f09fa510e60329f836e410fd1461e4
-
SHA1
6b6f2fd23f0ebda147fde9e103e3e05fbaddc014
-
SHA256
abaebe561c53e28fee1cc389e0953164853a3b5aa6f39bc2ee98609d5abf0079
-
SHA512
e2d757a9eb3e24e0593ca088b6c0c914bf839306fe079406cfb4ca3e7308e749afa09bdb6cae66a4b2c9016b1276fd98cdfe2e31143e1d1d8772b8d5dcfafe53
Score3/10 -
-
-
Target
ie/MediaWatchV1home421.dll
-
Size
85KB
-
MD5
f0c57d1cd17713b644214f73575dc430
-
SHA1
fbac7b3f78bf680d54a387533ca2755e64ee3e7a
-
SHA256
2da510a8b23f3abcd9c9190a48122024603378e66a873d5e98127868b775bc09
-
SHA512
8ede09ed3738024545200e10c011befbae99ab429abba57acda3676d3538d036cca34b2b50a892fb7c6bf97b53746bdbdde5bf86c36141b8286fedb7ec6df1d3
-
SSDEEP
1536:/n/1CsEmkaMAvtahrOb8Dkt+cHA9glQbdFPF:X12mkaMAlahrO+cguabdl
-
-
-
Target
uninstall.exe
-
Size
285KB
-
MD5
f791d3e3d586a0b45eb8e49b0207c66a
-
SHA1
0cb139456f72e85b7dc80d2bcf3a4b6c6c09b4ba
-
SHA256
2c0e5dc60c6a798859d9ad092171ee0a96b926026a39a563f641f5efe2d0463e
-
SHA512
f118105a65491e2460d1b110d7c0bfbecd2affae257bf102ec4a8a5d2de1dd35075b137ac71e2b07426dc60264a16ba5417cd4b73a5cca87507df81a92ff09db
-
SSDEEP
6144:Ee34KApeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1+:L8eZHkwuPikQ7lKH5p5H9x1+
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -