4c66397111ccf4e1e20678941f3df997e84c556c891332006155d4799dd2b1a4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Wajam.gen.31ff33d91b11071141aba1102456d817
Size 226KB
Sample261014-ffdsjsfx91
SHA256 4c66397111ccf4e1e20678941f3df997e84c556c891332006155d4799dd2b1a4
MD5 31ff33d91b11071141aba1102456d817
SHA1 360c0e86da2abaeeb11c05320c57b5d8519413da
SHA512 2023bd0ffa79976efc8641ce93e07d174bc0cd795e56adc13f833f62d4c3dce5d50fc41cb2c000c708ed444f4ef1927386499b4cd2c1cce10030c92c628786e4
SSDEEP 6144:1FJ0SCAPJkS4Aczz7pJ59E6rTUadigTZ/t5q2pd5A8WwZ:JCnS4Acf7pBxddZ/bJd5A8J
TLSH
T1C1341312E2D09DA7C586673119367BD5CE7F4A1056106A5313FABFBBBEB32034C016EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Wajam.gen.31ff33d91b11071141aba1102456d817
- Size 226KB
- SHA256 4c66397111ccf4e1e20678941f3df997e84c556c891332006155d4799dd2b1a4
- MD5 31ff33d91b11071141aba1102456d817
- SHA1 360c0e86da2abaeeb11c05320c57b5d8519413da
- SHA512 2023bd0ffa79976efc8641ce93e07d174bc0cd795e56adc13f833f62d4c3dce5d50fc41cb2c000c708ed444f4ef1927386499b4cd2c1cce10030c92c628786e4
- SSDEEP 6144:1FJ0SCAPJkS4Aczz7pJ59E6rTUadigTZ/t5q2pd5A8WwZ:JCnS4Acf7pBxddZ/bJd5A8J
- TLSH
  T1C1341312E2D09DA7C586673119367BD5CE7F4A1056106A5313FABFBBBEB32034C016EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2
- Target
  $PLUGINSDIR/GetVersion.dll
- Size 6KB
- SHA256 7d76c7dd8f7cd5a87e0118dacb434db3971a049501e22a5f4b947154621ab3d4
- MD5 5264f7d6d89d1dc04955cfb391798446
- SHA1 211d8d3e7c2b2f57f54a11cb8bc4fa536df08acc
- SHA512 80d27ee2f87e2822bd5c8c55cc3d1e49beebb86d8557c92b52b7cbea9f27882d80e59eefa25e414eecee268a9a6193b6b50b748de33c778b007cde24ef8bcfb7
- SSDEEP 96:E12Z84uiwpGTVTDSpaHYfniz0R3GhCvXY6Ix5vdR7pBi46AQ5Vu4:2STVTGwYhR3GhCvy5vH7pBi46AQ5Vu
- TLSH
  T1F4D1C3F343E50BE0D03751BE40D64A9B0770E6684EE0E46A48478DE264E731AEF3BB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/Math.dll
- Size 66KB
- SHA256 0598f7d83db44929b7170c1285457b52b4281185f63ced102e709bf065f10d67
- MD5 b140459077c7c39be4bef249c2f84535
- SHA1 c56498241c2ddafb01961596da16d08d1b11cd35
- SHA512 fbcb19a951d96a216d73b6b3e005338bbb6e11332c6cc8c3f179ccd420b4db0e5682dc4245bd120dcb67bc70960eab368e74c68c7c165a485a12a7d0d8a00328
- SSDEEP 1536:0P43WZ4Ql60gam+2MwRmPeqFVHbQH0ZZ1Iet:0wU609VMH0T/t
- TLSH
  T184639E3375D540F2D19E40B514A55F2BDF7DA6248BE24DD34F6628CAAE20EE1A233707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- TLSH
  T1E181857B92E50DF3D0A447BB00D71CE70226DC701769411E89472A8924E572BFE2EB06
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/blowfish.dll
- Size 22KB
- SHA256 053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae
- MD5 5afd4a9b7e69e7c6e312b2ce4040394a
- SHA1 fbd07adb3f02f866dc3a327a86b0f319d4a94502
- SHA512 f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511
- SSDEEP 384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub
- TLSH
  T10BA2AE87D9E0CC71D1DADAFB4E92D10DEBF235302D8A151875FA2CCB489B2D70A1C656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/manlib.dll
- Size 25KB
- SHA256 5d39bdd81b123645e3f7cc1006deae96dbaaabe71946e235897a50fbb314e125
- MD5 94ba775c8a1f4d6c9bb1966eddce22b5
- SHA1 4ed1946ecfb758cc0f68aa452401b37454a107d7
- SHA512 5f42ac7bd636ed372d4bc8d0c140007e2123cbf82effcacd388d67aedaef54110f9a01463d293016c2487de9f2725cefdc6f4e59e78c1bd6fb3f379e721c6e6e
- SSDEEP 384:TVYyb6btb0e4JNvPuzsVAAah1vrmCBeGznQf58bt0Ac9khYLMkIX0+GGxky8oOwb:TVYybKhg2snCBPnQfCb/Ow
- TLSH
  T127C2E546D24444BAD2E82172B1629F27593DFFB23180B487F7A336A558782EBF934317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsCBHTML5.dll
- Size 57KB
- SHA256 2fbc82090682ef32b084092e9b65534086ad398626aa84eae68b04758bb1309a
- MD5 fe3f848e2a306d586ab8f5433738d8db
- SHA1 1f4f5c8af912f865032db58e476d7ae6dcf9877c
- SHA512 4340ccce786298bd00acd9b25898632a4cf401de81ac9e8f17dc372998d4e83d0201babd9d266ba9a1857ccc2685102d118d47f3ad2d82142472e6e137a0ff5e
- SSDEEP 768:YQY2zS952oBE3Ki+b+2RyxwyL1Aws5yMktpQ69ZT4X+A3Lu:NYvaoeKi+izwyL/yyMktpQfX+gq
- TLSH
  T1CF433926FAD1F967CA3626332B1337A672987B7618E1544F8F0C1A287F34640E53A5D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH
  T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
- MD5 acc2b699edfea5bf5aae45aba3a41e96
- SHA1 d2accf4d494e43ceb2cff69abe4dd17147d29cc2
- SHA512 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
- SSDEEP 96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
- TLSH
  T19BD1E73D75C33DB3C54ACA762C65292B0FB8C9261B5402119B6716C279D5AE3FE29382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/nsisunz.dll
- Size 40KB
- SHA256 6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
- MD5 5f13dbc378792f23e598079fc1e4422b
- SHA1 5813c05802f15930aa860b8363af2b58426c8adf
- SHA512 9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5
- SSDEEP 384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4
- TLSH
  T188038EA392C146FBC5F8843931DA6E1D6A9EFC301BC16103CB2DBDA52D153967A642CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  $PLUGINSDIR/registry.dll
- Size 24KB
- SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
- MD5 2b7007ed0262ca02ef69d8990815cbeb
- SHA1 2eabe4f755213666dbbbde024a5235ddde02b47f
- SHA512 aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca
- SSDEEP 384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA
- TLSH
  T1FCB26B82B1D1E973D09F0479AB993F15E3EFAD507670EC5300667AC732A0AA2C769713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $PLUGINSDIR/serlib.dll
- Size 16KB
- SHA256 5c0d2c23203946c59306233a96da7db2911aa22bfd87c41abc12b4eee87c10ef
- MD5 febff2c363c7f7664687eefe8253087e
- SHA1 0b2c3e9a6ae860d1eb82f725a2d1a8037d68a893
- SHA512 06ba120ea474e00092faad360e68c734cdbbf54c52cb819d49f4f065c61d3f95a84171b62c4988058b636df885b32b293a5174e723e50b0415623a9ed9172268
- SSDEEP 384:B0FdvbyMQpBiyWUsi1Z+EKTlMvD0Ac9khYLMkIX0+GsyvV6:q1bL2iyWUp+EKxiuV6
- TLSH
  T1F272080296108976F4B7017269BA591A952CFFA2335860C7B3C71D9E4A7A5F3FB38307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Reads user/profile data of web browsers

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26