Overview
overview
7Static
static
3JaffaCakes...b2.exe
windows10-2004-x64
7JaffaCakes...b2.exe
windows11-21h2-x64
7$PLUGINSDI...is.dll
windows10-2004-x64
3$PLUGINSDI...is.dll
windows11-21h2-x64
3ffMediaWat...ion.js
windows10-2004-x64
3ffMediaWat...ion.js
windows11-21h2-x64
3ff/chrome/...548.js
windows10-2004-x64
3ff/chrome/...548.js
windows11-21h2-x64
3ff/chrome/...ion.js
windows10-2004-x64
3ff/chrome/...ion.js
windows11-21h2-x64
3ie/MediaWa...48.dll
windows10-2004-x64
6ie/MediaWa...48.dll
windows11-21h2-x64
6uninstall.exe
windows10-2004-x64
7uninstall.exe
windows11-21h2-x64
7$PLUGINSDI...is.dll
windows10-2004-x64
3$PLUGINSDI...is.dll
windows11-21h2-x64
3General
-
Target
JaffaCakes118_1c62fec3dc13124a101770ac652513b2
-
Size
634KB
-
Sample
250704-vds7sawvdw
-
MD5
1c62fec3dc13124a101770ac652513b2
-
SHA1
c90842d4138e07b66384623f13c9cf89b2af0c63
-
SHA256
03be46297897fb62696dba1a148ead1e246c333e3a347675769c6a2fc79f91bd
-
SHA512
8eceec44cf54028d7af9a243eb01374860f49b72e8cf7304ae43738de39b7c47ef57352e6a6742fbc9201f352edac27fde8d3c5b8242815ac03f71793a8e77b4
-
SSDEEP
12288:LEz9hwJPmG4GjeZHkwuPikQ7lKH5p5H9x1JeZHkwutifQ/lK15ppxlAlf/:LEz7wJ+G4GjeZEXi37l6Br1JeZEFi4/J
Behavioral task
behavioral1
Sample
JaffaCakes118_1c62fec3dc13124a101770ac652513b2.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1c62fec3dc13124a101770ac652513b2.exe
Resource
win11-20250610-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/aminsis.dll
Resource
win11-20250619-en
Behavioral task
behavioral5
Sample
ffMediaWatchV1home548chaction.js
Resource
win10v2004-20250619-en
Behavioral task
behavioral6
Sample
ffMediaWatchV1home548chaction.js
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
ff/chrome/content/ffMediaWatchV1home548.js
Resource
win10v2004-20250619-en
Behavioral task
behavioral8
Sample
ff/chrome/content/ffMediaWatchV1home548.js
Resource
win11-20250619-en
Behavioral task
behavioral9
Sample
ff/chrome/content/ffMediaWatchV1home548ffaction.js
Resource
win10v2004-20250610-en
Behavioral task
behavioral10
Sample
ff/chrome/content/ffMediaWatchV1home548ffaction.js
Resource
win11-20250619-en
Behavioral task
behavioral11
Sample
ie/MediaWatchV1home548.dll
Resource
win10v2004-20250610-en
Behavioral task
behavioral12
Sample
ie/MediaWatchV1home548.dll
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win11-20250610-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/aminsis.dll
Resource
win11-20250619-en
Malware Config
Targets
-
-
Target
JaffaCakes118_1c62fec3dc13124a101770ac652513b2
-
Size
634KB
-
MD5
1c62fec3dc13124a101770ac652513b2
-
SHA1
c90842d4138e07b66384623f13c9cf89b2af0c63
-
SHA256
03be46297897fb62696dba1a148ead1e246c333e3a347675769c6a2fc79f91bd
-
SHA512
8eceec44cf54028d7af9a243eb01374860f49b72e8cf7304ae43738de39b7c47ef57352e6a6742fbc9201f352edac27fde8d3c5b8242815ac03f71793a8e77b4
-
SSDEEP
12288:LEz9hwJPmG4GjeZHkwuPikQ7lKH5p5H9x1JeZHkwutifQ/lK15ppxlAlf/:LEz7wJ+G4GjeZEXi37l6Br1JeZEFi4/J
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -
-
-
Target
ffMediaWatchV1home548chaction.js
-
Size
829B
-
MD5
3ef0b596769f62a3d0a5872003f52d70
-
SHA1
e2aae2aa5db8bf88e2f8a3df961799cf63605b66
-
SHA256
a851c9c60f63cfd23d6109079d48bf34e70dac7d5a2b87b096f0a0f1adbee7f6
-
SHA512
de07a382571ce731480e9014390c38f4dcd0e3ea24c49f6ef69a8c26b6343bfd7c1082dfff4852db617b0bd0c2a46d00428f38e747dae21ea8c3f6b9f591d1c7
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home548.js
-
Size
744B
-
MD5
3809b7df9192ede4d914f7eeee2cb6b8
-
SHA1
3375ac7b4ad9dabee00beff39c7779052757bd89
-
SHA256
912a6563f2f1f5e525a0079e7d5129348b7773a5f2d5aab52ea2116c6d965c78
-
SHA512
675e3a0751d5a86727a1ccaf4fb159bdf67bb3bdd6596e9da9499ef5e39099334bb004d0e8afdc5212e97f382f3cda255fe55c91d0ac82b61265a9a4d10ea7aa
Score3/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home548ffaction.js
-
Size
674B
-
MD5
fd988598420e0da755123e173b4fdcc2
-
SHA1
7ac7df1cb8b83461d3c57eaefc55a4ff07b057be
-
SHA256
fa81a8fd39b489571eea8957ba7b8348284605479599905092c28616d896403d
-
SHA512
c26a91c21b78be54054627b0def51cfb570baa96cb1fc11cf3649877657170f43dbe3fea859477502cde592c620b6c5db127106b43d712b3e336211116811e6c
Score3/10 -
-
-
Target
ie/MediaWatchV1home548.dll
-
Size
85KB
-
MD5
adeba08ec1afeb0cb35aa05f1bb39b58
-
SHA1
0485b77644b692c53b57acbc7d0eb7d7d6fa1c8e
-
SHA256
ee7ae796e0785cd86cab54ea5875fb3edc63d72063428326c46046af5413cdfd
-
SHA512
f35880a0b4fa181558fce2a1fabdaf80eb41f704937d03277effe2220ca09ad4a9beed88cf61ad11fe76a25411aed9f1d6f534d8d87bc0fd065bbaf6af9fc622
-
SSDEEP
1536:dn/1CsEmkaMAvtahrOb8DktHwHA9glQFZEThl:112mkaMAlahrOHwguaFZo
-
-
-
Target
uninstall.exe
-
Size
285KB
-
MD5
2f51783fc6f6a337f6515087f3048542
-
SHA1
4a65871ff5bbaa17bb55faabebdf3fb5291c6e38
-
SHA256
74fb48647bb3072d9084bc822c125fd79263e4d4360fa19bbd0c47be29d47314
-
SHA512
0eedc34bb76015794a0baacfde44bbc55d0272e7bf5602e8141cdc93ea3984937aa5307d88b350e31320829cd9f08b5b338b936b94e4488229b2644d44510dc5
-
SSDEEP
6144:Ee34MwpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1F:ZMeZHkwuPikQ7lKH5p5H9x1F
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -