Overview
overview
7Static
static
3899a2c3e89...18.exe
windows7-x64
7899a2c3e89...18.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3ffMediaWat...ion.js
windows7-x64
3ffMediaWat...ion.js
windows10-2004-x64
3ff/chrome/...945.js
windows7-x64
3ff/chrome/...945.js
windows10-2004-x64
3ff/chrome/...ion.js
windows7-x64
3ff/chrome/...ion.js
windows10-2004-x64
3ie/MediaWa...45.dll
windows7-x64
6ie/MediaWa...45.dll
windows10-2004-x64
6uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3General
-
Target
899a2c3e89751b1f729b2e8bfa60d670_JaffaCakes118
-
Size
634KB
-
Sample
241103-ewwsmaxpcn
-
MD5
899a2c3e89751b1f729b2e8bfa60d670
-
SHA1
630f007fa1ccde0d15104b4161745f13d5f68862
-
SHA256
53ab2a428db8beee775e418d7db245b5dc5fb25cc00362ade83f447e476f0270
-
SHA512
4fc546989a07c2366670bc773d954fa61867245cfbbd8e876338b2c60849e2cdefd5b121647c15092988cf1a51cf0fdf03f5b9f460107d50b9124ac5995fca4f
-
SSDEEP
12288:0joosDG4GjeZHkwuPikQ7lKH5p5H9x1keZHkwutifQ/lK15ppxlAlfn:0jooWG4GjeZEXi37l6Br1keZEFi4/lGo
Static task
static1
Behavioral task
behavioral1
Sample
899a2c3e89751b1f729b2e8bfa60d670_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
899a2c3e89751b1f729b2e8bfa60d670_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
ffMediaWatchV1home945chaction.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
ffMediaWatchV1home945chaction.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
ff/chrome/content/ffMediaWatchV1home945.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
ff/chrome/content/ffMediaWatchV1home945.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
ff/chrome/content/ffMediaWatchV1home945ffaction.js
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
ff/chrome/content/ffMediaWatchV1home945ffaction.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
ie/MediaWatchV1home945.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
ie/MediaWatchV1home945.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
899a2c3e89751b1f729b2e8bfa60d670_JaffaCakes118
-
Size
634KB
-
MD5
899a2c3e89751b1f729b2e8bfa60d670
-
SHA1
630f007fa1ccde0d15104b4161745f13d5f68862
-
SHA256
53ab2a428db8beee775e418d7db245b5dc5fb25cc00362ade83f447e476f0270
-
SHA512
4fc546989a07c2366670bc773d954fa61867245cfbbd8e876338b2c60849e2cdefd5b121647c15092988cf1a51cf0fdf03f5b9f460107d50b9124ac5995fca4f
-
SSDEEP
12288:0joosDG4GjeZHkwuPikQ7lKH5p5H9x1keZHkwutifQ/lK15ppxlAlfn:0jooWG4GjeZEXi37l6Br1keZEFi4/lGo
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -
-
-
Target
ffMediaWatchV1home945chaction.js
-
Size
829B
-
MD5
575e5ef71cddc118c3e7ecd12340359d
-
SHA1
7a2d16a43c12d40d64604e9b5a4a93a76480f729
-
SHA256
29c711cf2e97400413375b936a0cd0ce5fddd1b6d4137a727d9a2af357c46e36
-
SHA512
f3cc1d83445d03e38d3c254e268cb7266bb9c7439b54e3f2469f628fd65e84b256e93536385cf685b0123906f2a49caa3a269cace0666dc3eb15eaa3d91d690d
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home945.js
-
Size
744B
-
MD5
526df2963b53ce639683ba25b89edd7f
-
SHA1
d8c6edd688284cc702e163e86c87f45915ad4d4f
-
SHA256
9cc7a9f2d19bc9b3b70bf57562a53795e57f8ffe4b21b8e04418b3ad38b8e1d7
-
SHA512
b9f02b51a5d8e837681346002b24f7a2ccd30ea740ce5a425b20f548390dd2e42e565af6b5d3fdb132128430efee6f651253b957578e9cbe9c49522b3e2a03c3
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home945ffaction.js
-
Size
674B
-
MD5
0e75d58615f49b0c9f897741afa763d5
-
SHA1
55af022c8accf5da022af109627a36d868032986
-
SHA256
e03e05fd8a8f4f19f32476b9784b405d55a9cd46552dee800c11a13bb5657cab
-
SHA512
62cc75db638dbac454e102fa45b95ceae48bb307e71b27b4da6741d9a6f760f89021a6ee3d37a8b0e5040681617d380c8d6cfaaba41247f9a13d4347d7d485ec
Score3/10 -
-
-
Target
ie/MediaWatchV1home945.dll
-
Size
85KB
-
MD5
3407c77dde95371cacebafa56c85a62f
-
SHA1
3c905247cd7d0a159e9519c3d2a817f5b1d4c906
-
SHA256
d911df34caf0c4f142f0abe094d11e69dbc9586b41e44cbe4a5bbb3cf2b1716c
-
SHA512
59b0955ebc7160788a81bef8159af9e502a5a00ddbcecb4697e09feac3ff9867f303f7956375d1ae64a114361fa9eb9f6096a0d48249a210e532d115bab714fd
-
SSDEEP
1536:i3flScQkGMAJtasrOb8Dk9QBHgNglQtGt2:2likGMALasrO0BA+atG4
-
-
-
Target
uninstall.exe
-
Size
285KB
-
MD5
402e8ac39db277d3fc74521863b4d7af
-
SHA1
02f570c45c58655901864da8e46648671eddb29b
-
SHA256
d363edf8472819b11193a1cbaa6ceb8fd7accaab08744af4ce067ae4dc18d0c8
-
SHA512
a71196130237e6b77a4c7e38010aee59c2411dc7dcc0abde9bbbd891e8d5c45d973772b47b1dec53db6e2cc82377202abfe0a3be5bd49efc75bc648777b9c9a5
-
SSDEEP
6144:Ee34jbpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1F:iVeZHkwuPikQ7lKH5p5H9x1F
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -