a0692466f4354a043443b76694afed846b17364033fc7951d46d7b11d6687d6e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.WebSearch.gen.578f6744a32d63298c455a8f6c120249
Size 1.2MB
Sample261014-ffslpswt3k
SHA256 a0692466f4354a043443b76694afed846b17364033fc7951d46d7b11d6687d6e
MD5 578f6744a32d63298c455a8f6c120249
SHA1 ce569ff1b442501462d05e23855b0c8d957cab52
SHA512 47f4c9b1325e4e0f07252ad5bf0b28df0e9217f1d98bab5a9090e9640cb9c563fd3e9c06c2e28e11c2f8f440a0a2e2f0a50a5f4c1c59f1259bd5c6ba6b9ddc6d
SSDEEP 24576:+dxzGZtVp1m7Haxq04hvQknbdaZPWXqCqHsSs/zRjWEGFUtaS:EIwAh4hvQknbcZ+XqPHvCtKiES
TLSH
T1B945230226568025CDAB573688D9EB29E5E4BC65FBF11F1A056036243F73B83FD4D3A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jaffacakes118_not-a-virus.HEUR.AdWare.Win32.WebSearch.gen.578f6744a32d63298c455a8f6c120249
- Size 1.2MB
- SHA256 a0692466f4354a043443b76694afed846b17364033fc7951d46d7b11d6687d6e
- MD5 578f6744a32d63298c455a8f6c120249
- SHA1 ce569ff1b442501462d05e23855b0c8d957cab52
- SHA512 47f4c9b1325e4e0f07252ad5bf0b28df0e9217f1d98bab5a9090e9640cb9c563fd3e9c06c2e28e11c2f8f440a0a2e2f0a50a5f4c1c59f1259bd5c6ba6b9ddc6d
- SSDEEP 24576:+dxzGZtVp1m7Haxq04hvQknbdaZPWXqCqHsSs/zRjWEGFUtaS:EIwAh4hvQknbcZ+XqPHvCtKiES
- TLSH
  T1B945230226568025CDAB573688D9EB29E5E4BC65FBF11F1A056036243F73B83FD4D3A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery persistence spyware
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
- MD5 a4dd044bcd94e9b3370ccf095b31f896
- SHA1 17c78201323ab2095bc53184aa8267c9187d5173
- SHA512 87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a
- SSDEEP 192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE
- TLSH
  T168325C12135081F3E4918138886B3A276B6A15029BF98E57DFD39646BE21BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/npHelper.dll
- Size 295KB
- SHA256 884894a631f0e2585e0414cf26c836b13763b319993126ac28b1d96d2b6f7abc
- MD5 131acdb9fb02af0f12e6a3854386caf2
- SHA1 9488242580d4de08d86b7ec3a2cf38fcb4b9a057
- SHA512 a4fe99f6c4e53568c3331f39f4e2a3215e203f44c121a80231ae9df936d4b0d12150725e9077024a65a25790716a681a2a572d29faee09503351506071d8e59f
- SSDEEP 6144:/b0Bj6u2vizcDXjC+fCwzCGrwIUhAO3MZblU:/gx2vSSXmOCAahhmblU
- TLSH
  T1B5549D21B582C036E0BE05343438D6664ABD7E300FB599EBA7D84E6D4F742C19B35E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 067c77d51df034b4a614f83803140fbf4cd2f8684b88ea8c8acdf163edad085a
- MD5 0d45588070cf728359055f776af16ec4
- SHA1 c4375ceb2883dee74632e81addbfa4e8b0c6d84a
- SHA512 751ebf4c43f100b41f799d0fbf8db118ea8751df029c1f4c4b0daeb0fef200ddf2e41c1c9c55c2dc94f2c841cf6acb7df355e98a2e5877a7797f0f1d41a7e415
- SSDEEP 192:ob8cSzvTyl4tgi8pPjQM0PuAg0YNyhIFtSP:mBSzm+t18pZ0WAg0RhIFg
- TLSH
  T1E412F793E5A820B3C2D3533F35BE2B2EC7B95335B0512C0482739A497A6947A6E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/terms.rtf
- Size 25KB
- SHA256 52723bc61fb9f7534a49f7b0382c3197422dc548c9bbc1e6160146c059a94b90
- MD5 eb560dd385e48c8100608768623aea51
- SHA1 a3caa6c552edab90e1e0f6dec3b738abcc4dca80
- SHA512 e6cb70401c5165f3d674f80da0974f25c4f212f1dd82885a519ca86ed0724f07d2bcbe00defb407b1fb0cf8c38869ab4a0d3421ae249509e77610cd1486696fb
- SSDEEP 768:IqWJISmWT4vzCulk6IZ0zrl3gxDaZE7SsvA:IJIYT74dSaa7Sso
- TLSH
  T117B2EA2F730213B10D9D0331664AA9D6E72A92BCBAB697D09451901D2373E34D3B7ADB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $_14_/$_14_/$_18_.exe
- Size 2.0MB
- SHA256 8a8fcde6287c92b435e947ff15d577bb4553d9265c78e55907b71823cf8dc9fc
- MD5 bed5050567df247e174ae41b5f14b04b
- SHA1 69d56071412a4350681792a007c51ea59e34bf0e
- SHA512 fc2c2fa47a23a7bcab9ec1c37b15cd0cfd3117491d25a4ac65a5b8616393f283461824869ff68aceb60bcf3aad8db13c3289e72da0acd52ec0cb3d4fafd03e1c
- SSDEEP 49152:TY2bzYO4kwB+s++jO1QydlMNaXYMHt/uWdMyhx3ivBfrre8FHFO:TPh4kwAdhNHj
- TLSH
  T1DB95BF247A80C437C13201329E7EE2AD55BD7D229F6548C772DC3E6D1FF86D16A31A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12