086c127decbbf25dbd44361729817a89180ae5eede3a507bc21c5bcc81e347c1

Sharing

Copy URL Twitter E-mail

General

Target

4037588cc92a331eb4009389b958a966_JaffaCakes118
Size

634KB
Sample

241013-q6be8avapm
MD5

4037588cc92a331eb4009389b958a966
SHA1

4771c12b1b365110b04666c8d277321e606344e9
SHA256

086c127decbbf25dbd44361729817a89180ae5eede3a507bc21c5bcc81e347c1
SHA512

02332666ab360212e3e5e76b8848191de52bd0cc96ccf9ffa415d1c9064ce2474baaf611c79487b96aec4afabf2b0465b6e070d4c8325c31c76a9b448b323f96
SSDEEP

12288:aJ0Y5GG4GjeZHkwuPikQ7lKH5p5H9x1KeZHkwuLiDQTlKJ5p+xWlfR:aJ05G4GjeZEXi37l6Br1KeZEjiMTlmWY

Score

7^/10

Malware Config

Targets

- Target
  
  4037588cc92a331eb4009389b958a966_JaffaCakes118
- Size
  
  634KB
- MD5
  
  4037588cc92a331eb4009389b958a966
- SHA1
  
  4771c12b1b365110b04666c8d277321e606344e9
- SHA256
  
  086c127decbbf25dbd44361729817a89180ae5eede3a507bc21c5bcc81e347c1
- SHA512
  
  02332666ab360212e3e5e76b8848191de52bd0cc96ccf9ffa415d1c9064ce2474baaf611c79487b96aec4afabf2b0465b6e070d4c8325c31c76a9b448b323f96
- SSDEEP
  
  12288:aJ0Y5GG4GjeZHkwuPikQ7lKH5p5H9x1KeZHkwuLiDQTlKJ5p+xWlfR:aJ05G4GjeZEXi37l6Br1KeZEjiMTlmWY
Score

7^/10

adware discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  ffMediaWatchV1home3653chaction.js
- Size
  
  834B
- MD5
  
  3ea0332aa905ef77e38349a42c00bfc0
- SHA1
  
  0dc4b7fcd1a2b3d9e0c6b5a3ce17071f5dc5f9eb
- SHA256
  
  4ae0661bd7ab2e449e2453f705e411dbd78d850f712f2ad4d12fc602590da424
- SHA512
  
  6ac44dd27ace494b04f1604d154cc3e5452d3c7ea10f3b1b0d9123495f47145173d819f39fe2cbafb8d007fbfbde4869143586c70bb94f2cee3d8e153c4ebc7f
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  ff/chrome/content/ffMediaWatchV1home3653.js
- Size
  
  747B
- MD5
  
  858149d11ef0fa849ad95002b6c9f238
- SHA1
  
  d8b8248eeb6910a9f86dd11f70f4b3573220e6dc
- SHA256
  
  a95507d1bcc1c3f5c23211013302f56a8c0831b1f4e585d16deeda6717563568
- SHA512
  
  d1a25b123e6dc6731586f0e7313d200b50c1aedd61f5a00626c1cd7d05ca1d9fa63a96b6742d73a29cbe20263aee9d8c668a454782a35b52ff3af0a181f7e351
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  ff/chrome/content/ffMediaWatchV1home3653ffaction.js
- Size
  
  678B
- MD5
  
  50f284336d04459379dba680551b9f1c
- SHA1
  
  71d36ba27769653861cdf7f5635f13f40baaaf4e
- SHA256
  
  c11a89b0890ceb834f781fee6b394aa56bc01e1c2bf44785063cbd173de1000b
- SHA512
  
  95b35938bad44ae37dba9ae4455570cb7a49e989cc7409978b38a41aaa1a2fd8b6ee487afb72f632f960fce3833c39e0419f6143d11c2f9c315e8746d97a0bf9
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  ie/MediaWatchV1home3653.dll
- Size
  
  85KB
- MD5
  
  4226815ddcf0528f89ef8f04946f1ea2
- SHA1
  
  90fd7005af5bd31a4308075534ad8ea9cc98c0ab
- SHA256
  
  6af5aac1db59e1e94a9c6bb9612b024e4bc9208575565368b902409e57c78e20
- SHA512
  
  c721d6d14570cc7d27a86ab336bb26cabafb4be61adbf5715d1f663258dd7aae173b39add9409a0d52a3a8611b1198147fb123383dff927ca569a86ceaf744d8
- SSDEEP
  
  1536:w8/1CsEmka04RhRtahrOb8DkhSyHA9glQIlzJ:r12mka0ElahrO+yguaIlz
Score

6^/10

adware discovery stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral11 behavioral12
- Target
  
  uninstall.exe
- Size
  
  285KB
- MD5
  
  5a307df02a6e4a25dfde6125f71b76cb
- SHA1
  
  5f7504dc3f17db693f289d2f98aec4c09e47e19b
- SHA256
  
  64fcdf81e52f4f956ab896a70da62f371dccff7882b3b6b41afe0eab3969f683
- SHA512
  
  8d2184b624afba9786f5ffa40dbbddb2fa56db75350858a8fbf8a66a428b38c871aa309b795943954183f70c9c57219e1ae8d189727646d2a9992c89520e8327
- SSDEEP
  
  6144:Ee34pbDpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1P:sJeZHkwuPikQ7lKH5p5H9x1P
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/aminsis.dll
- Size
  
  559KB
- MD5
  
  51ba1095f0ae45a2d444bea506cb9ad4
- SHA1
  
  038a5d53d055a6d440bd2c8864c2f51db206c5e5
- SHA256
  
  b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
- SHA512
  
  f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
- SSDEEP
  
  12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score

3^/10

discovery
behavioral15 behavioral16