Overview
overview
8Static
static
7e692a90143...18.exe
windows7-x64
7e692a90143...18.exe
windows10-2004-x64
3$PLUGINSDI...ad.dll
windows7-x64
3$PLUGINSDI...ad.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
7$PLUGINSDI...ll.dll
windows10-2004-x64
7$TEMP/Mail...te.exe
windows7-x64
8$TEMP/Mail...te.exe
windows10-2004-x64
8$TEMP/marker.exe
windows7-x64
1$TEMP/marker.exe
windows10-2004-x64
1SkyMonk.exe
windows7-x64
1SkyMonk.exe
windows10-2004-x64
1english.dll
windows7-x64
1english.dll
windows10-2004-x64
1filter.dll
windows7-x64
1filter.dll
windows10-2004-x64
1russian.dll
windows7-x64
1russian.dll
windows10-2004-x64
1uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ad.dll
windows7-x64
3$PLUGINSDI...ad.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
08/04/2024, 03:51
Behavioral task
behavioral1
Sample
e692a9014378ac46f150b9122698776c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e692a9014378ac46f150b9122698776c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InetLoad.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InetLoad.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/md5dll.dll
Resource
win7-20240319-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/md5dll.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$TEMP/MailRuSputnik_rfrletitbit2_s_mpcln9514_lite.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$TEMP/MailRuSputnik_rfrletitbit2_s_mpcln9514_lite.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$TEMP/marker.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$TEMP/marker.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
SkyMonk.exe
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
SkyMonk.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
english.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
english.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
filter.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
filter.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
russian.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
russian.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
uninstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
uninstall.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/InetLoad.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/InetLoad.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240319-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240226-en
General
- Target e692a9014378ac46f150b9122698776c_JaffaCakes118.exe
- Size 3.6MB
- Sample240408-eepyraga24
- SHA256 27f31860fd9f2a5b127f0d13972cd0a9d3f589a9add6fa0d7feac606f2a7cb5b
- MD5 e692a9014378ac46f150b9122698776c
- SHA1 7a7bdb86c86e1e1adff07c43b1134479395f0eb3
- SHA512 84687887ac68843c8cd465fd0fc3674e18954c14bd21ed665390080ed9c93462958cdf770309e4c3ffb93ba18db965d8d35c18e57023351ea50994b31a2c0b91
- SSDEEP 98304:u84pGEbRzNwJt+YuNHIbGhyk/5rX1UUk38NAg2uvN2n8ibIxH3:uH0EVNw6hH0GT/h1UU4+AgvvN2n8JX
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).