Overview
overview
7Static
static
365f59b094e...18.exe
windows7-x64
765f59b094e...18.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3ffMediaWat...ion.js
windows7-x64
3ffMediaWat...ion.js
windows10-2004-x64
3ff/chrome/...249.js
windows7-x64
3ff/chrome/...249.js
windows10-2004-x64
3ff/chrome/...ion.js
windows7-x64
3ff/chrome/...ion.js
windows10-2004-x64
3ie/MediaWa...49.dll
windows7-x64
6ie/MediaWa...49.dll
windows10-2004-x64
6uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3General
-
Target
65f59b094e082a4f4e3c0d9d2770b5bc_JaffaCakes118
-
Size
634KB
-
Sample
241021-h55zfawelk
-
MD5
65f59b094e082a4f4e3c0d9d2770b5bc
-
SHA1
a904159c22e63e91d3b8b6fdb088756e194526f6
-
SHA256
a409c1d249f542c1598b3e34d6641dc98a9362781b2a4f97b49d0aceccb0d529
-
SHA512
3d52f8f402c589b283a064c2e70379ae3c55f4c739a61c4c368f951f68284299c8eac3ac6a13d83b8b119c50729b4f66a29d5155be079dc30bebee0bd4400b92
-
SSDEEP
12288:h9DW/G4GjeZHkwuPikQ7lKH5p5H9x1QeZHkwu1ivQTlK55pMgVdm:hw/G4GjeZEXi37l6Br1QeZEtioTlOxVs
Static task
static1
Behavioral task
behavioral1
Sample
65f59b094e082a4f4e3c0d9d2770b5bc_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
65f59b094e082a4f4e3c0d9d2770b5bc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
ffMediaWatchV1home249chaction.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
ffMediaWatchV1home249chaction.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
ff/chrome/content/ffMediaWatchV1home249.js
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
ff/chrome/content/ffMediaWatchV1home249.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
ff/chrome/content/ffMediaWatchV1home249ffaction.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
ff/chrome/content/ffMediaWatchV1home249ffaction.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
ie/MediaWatchV1home249.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
ie/MediaWatchV1home249.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
65f59b094e082a4f4e3c0d9d2770b5bc_JaffaCakes118
-
Size
634KB
-
MD5
65f59b094e082a4f4e3c0d9d2770b5bc
-
SHA1
a904159c22e63e91d3b8b6fdb088756e194526f6
-
SHA256
a409c1d249f542c1598b3e34d6641dc98a9362781b2a4f97b49d0aceccb0d529
-
SHA512
3d52f8f402c589b283a064c2e70379ae3c55f4c739a61c4c368f951f68284299c8eac3ac6a13d83b8b119c50729b4f66a29d5155be079dc30bebee0bd4400b92
-
SSDEEP
12288:h9DW/G4GjeZHkwuPikQ7lKH5p5H9x1QeZHkwu1ivQTlK55pMgVdm:hw/G4GjeZEXi37l6Br1QeZEtioTlOxVs
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -
-
-
Target
ffMediaWatchV1home249chaction.js
-
Size
829B
-
MD5
4d422ef27b0afd448b7758d0124deebd
-
SHA1
a8d83474937583cfb807d40edec5167d35fb679b
-
SHA256
fb27e7647b5c223338e3dfbd8ce2d101e6530a9a849741abb9c1a98165e72554
-
SHA512
b9383bda831574ee056cc7ec71d483fbce904db26b3d0808b3c6266cdcde34920d2dd74b5deb486d7c26f6b60ee022cfdb9133ffb3e5a0be57492b466be7e35a
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home249.js
-
Size
744B
-
MD5
6fb7ce9bcf39b4ca1bc5c6206099614d
-
SHA1
b98940a460c5cd12f648f0691c9588df7ad548dc
-
SHA256
456c210767bd7b1b40f5f49f028bb5fe14960e5440a461fcd916a760514bd0ee
-
SHA512
afe52fd889ebdba6b48071da98e3317dd238ec470a302aaa6f4c75326ae21f1310ce8fc347481fbfd0841c1815f75eb7b17c825bc1efaa72d2d5b213556b801e
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home249ffaction.js
-
Size
674B
-
MD5
d0a5f39c85b5bd1e95f24b30863cdc1c
-
SHA1
614678d86016b1c14b9cb55072e898f56bb17d2d
-
SHA256
4fa760b7637fa87608c2f82333f9fed0c12d5c7dbe85f377f41f08150fd850b5
-
SHA512
cd1d78c191bb19fe83858f8390174686bcbe127bbcf58056bb16cc24ee338787a92ca537b5ef6a9bf833c20172a742f5f58b21c72d58c5cf6896a9dfc865562f
Score3/10 -
-
-
Target
ie/MediaWatchV1home249.dll
-
Size
85KB
-
MD5
2fc62f3e294b800f9463240d90e380ae
-
SHA1
b906eb8cd73d9b426e7a4bd4d27dc793299fc785
-
SHA256
33b20fb3905c0ac1cb56826ea427a2c1b283027a304bc81d4c371f24513eb91b
-
SHA512
e3159d0ed0227035c9b9d5cfc432597a3257253c389c19b3560c352f96b6ffa29e01a06abe5cc1e528f8b35d4d2e24ebbf653c23dd85db902a821d1f8a7363e0
-
SSDEEP
1536:mn/1CsEmkaMAvtahrOb8DktvIHA9glQeJVn1:C12mkaMAlahrOvIguaeJt
-
-
-
Target
uninstall.exe
-
Size
285KB
-
MD5
65b97e9f490bac12af57b428ca85c492
-
SHA1
806bdeaf7128898c23aa5ad61025892f8a19c2cf
-
SHA256
fb6aeae56a566529ef086fc2ef1d30ee5fddee541ad922e366a4837d05ccc522
-
SHA512
e78bf4718f082b34564368ed953c908df66e4d1680cbc70510c3544fcede732aefd938fa09edb394964a8410fb27576a7b082f41446386336dc9baf67cb9d316
-
SSDEEP
6144:Ee34ijpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1j:DteZHkwuPikQ7lKH5p5H9x1j
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -