Overview
overview
3Static
static
3e8b803925a...18.exe
windows7-x64
3e8b803925a...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3CrashReport.exe
windows7-x64
1CrashReport.exe
windows10-2004-x64
1Encrypt.dll
windows7-x64
3Encrypt.dll
windows10-2004-x64
3Funshion.exe
windows7-x64
Funshion.exe
windows10-2004-x64
General
-
Target
e8b803925a580c285ebcba8b652644c1_JaffaCakes118
-
Size
254KB
-
Sample
240408-3rtpgaag4v
-
MD5
e8b803925a580c285ebcba8b652644c1
-
SHA1
f38563159d92b358f06cc7874f5042f21629d6ce
-
SHA256
dcaacf44e38bf5f44cc5ef96b64a35ede43457a75e89364cf1cddf88a01bc108
-
SHA512
94b489ef570595579fe65dfc0a48aa874613189b617b8da2fa7a9cdc646b5563ea63eb14f855b618e95f6a22217277bc5de6fcb88b6c775e25ab5ea3e77d125b
-
SSDEEP
6144:/WwMnudQIhUCBaQ+ct2GLruD1GgdY0vA+1uYTbU6:Eu6b7QnpLrXcrvH46
Static task
static1
Behavioral task
behavioral1
Sample
e8b803925a580c285ebcba8b652644c1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8b803925a580c285ebcba8b652644c1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
CrashReport.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
CrashReport.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Encrypt.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Encrypt.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Funshion.exe
Resource
win7-20240319-en
Behavioral task
behavioral14
Sample
Funshion.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e8b803925a580c285ebcba8b652644c1_JaffaCakes118
-
Size
254KB
-
MD5
e8b803925a580c285ebcba8b652644c1
-
SHA1
f38563159d92b358f06cc7874f5042f21629d6ce
-
SHA256
dcaacf44e38bf5f44cc5ef96b64a35ede43457a75e89364cf1cddf88a01bc108
-
SHA512
94b489ef570595579fe65dfc0a48aa874613189b617b8da2fa7a9cdc646b5563ea63eb14f855b618e95f6a22217277bc5de6fcb88b6c775e25ab5ea3e77d125b
-
SSDEEP
6144:/WwMnudQIhUCBaQ+ct2GLruD1GgdY0vA+1uYTbU6:Eu6b7QnpLrXcrvH46
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
1d5c649dde35003a618b9679d5d71b92
-
SHA1
0409bbab3ab34f8c01289cdd847b4d1a32d05b18
-
SHA256
0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f
-
SHA512
b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9
-
SSDEEP
384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI
Score3/10 -
-
-
Target
$PLUGINSDIR/StartMenu.dll
-
Size
6KB
-
MD5
5aae8598d8b53bcec81d8e8c8a6732f9
-
SHA1
d071fcc74a107c7d7bc5a493d305b00976b07464
-
SHA256
be3f03c07be54354b8a9a30a8c0ac384f43c245c9b95ed1025549c76642f3fb4
-
SHA512
d20af152b9d1903cd9cd0ff584f14f95ee69cd7149c9ef9369257d08659d1a7ab5860055b39ebd0ead67cfc31da2571175623a5676116ce999acea2b7a643c1d
-
SSDEEP
96:VLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsBQhEfP0:VLjPk8OT30FFAmCP0
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
10KB
-
MD5
4eff5fafd746f5decb93a44e3a3d570c
-
SHA1
a11aa7681b7e2df1c7f7492a127d332d1495ea8a
-
SHA256
cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
-
SHA512
cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
-
SSDEEP
192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
Score3/10 -
-
-
Target
CrashReport.exe
-
Size
176KB
-
MD5
16508a7499ddd769777ab7a14322cc38
-
SHA1
a0660b1ef8bbbf595aead0030e075699e920aff7
-
SHA256
c246f010069fdb30966e4573cc6113e7b851c9096892775510960ea7ef85f37a
-
SHA512
949833b6a5096d502639f01bfd509e12b71100d34ff1fffdb06767c9c33520b34a834f5a54df0f45d207482f55264b905f284c54f8316a2a4c7acae788bf3160
-
SSDEEP
3072:XBqOrbmvmJ9BW7YcnXk3TBfjpcJs53/1EkxC:XEOrivmxW75U3TBrpcJ6XC
Score1/10 -
-
-
Target
Encrypt.dll
-
Size
64KB
-
MD5
5468eb7b4cd7e648a337a187e565447d
-
SHA1
f0269db098eb699ec7583ab40dd4bfb311a51b5d
-
SHA256
68cf718e9196b462248af847a430e7c40e2b1e3c9022d02e8cbfc21b1321f3be
-
SHA512
af48c98fd449f7e4733605cc6c57259df459f49820f7a572174a9b07dfd52c1fe9c0cd8b6866463c72b1150c9d5505dbb580bffb276f85ef19650a5dac7e9d43
-
SSDEEP
768:l9MVMloL02y2aP8ny4X+RW5yBWVB+Tyy0RiNWMx5j:l9wMlygmX+RW5GWwyy0cr5
Score3/10 -
-
-
Target
Funshion.exe
-
Size
65KB
-
MD5
f612eddb96487d0d7fc9112cdccc33ef
-
SHA1
e7f2ef54352c055b94783b19425177e02d11a8ea
-
SHA256
6d652e5a07f4b1a4c79fdccbb8097c82e1aab62ecffa1fd0f6e632253e06cf37
-
SHA512
c85653e598d2e873cbf17ac8ea717120607f923599e4abf3f51b087d4f537092dcc5c9d5a194e1caa38da52c2bfd836588f1a0448492f411f8ae98cca532711a
-
SSDEEP
1536:2B5XTWIYt4IwlcM6lx/3G/2AmvK4GphPT1gXUl:GWIgoH2AmvDq7gX2
Score1/10 -