Overview
overview
7Static
static
3e9f7c9f107...18.exe
windows7-x64
7e9f7c9f107...18.exe
windows10-2004-x64
7$PLUGINSDI...am.dll
windows7-x64
3$PLUGINSDI...am.dll
windows10-2004-x64
3$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
1$PLUGINSDI...ns.dll
windows10-2004-x64
1$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
1$PLUGINSDI...LL.dll
windows10-2004-x64
1$PLUGINSDI...te.dll
windows7-x64
1$PLUGINSDI...te.dll
windows10-2004-x64
1$PLUGINSDI...ta.dll
windows7-x64
3$PLUGINSDI...ta.dll
windows10-2004-x64
3$PLUGINSDIR/stack.dll
windows7-x64
3$PLUGINSDIR/stack.dll
windows10-2004-x64
3GConverter.exe
windows7-x64
1GConverter.exe
windows10-2004-x64
1GToolbar.dll
windows7-x64
6GToolbar.dll
windows10-2004-x64
6GUpdate.exe
windows7-x64
1GUpdate.exe
windows10-2004-x64
1Analysis
- max time kernel
119s - max time network
124s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
09/04/2024, 12:15
Static task
static1
Behavioral task
behavioral1
Sample
e9f7c9f10731414fcaefdd2437c1caa3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9f7c9f10731414fcaefdd2437c1caa3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/DLLWebCount.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/DLLWebCount.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/IEFunctions.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/IEFunctions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/SetHoldData.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/SetHoldData.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/stack.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/stack.dll
Resource
win10v2004-20240319-en
Behavioral task
behavioral19
Sample
GConverter.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
GConverter.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
GToolbar.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
GToolbar.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
GUpdate.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
GUpdate.exe
Resource
win10v2004-20240226-en
General
- Target GConverter.exe
- Size 508KB
- Sample240409-pfawbsaa2y
- SHA256 de44b30d0f6a9c99b3fafc4cfcce5a82e3b9d8ac4b32bf87ecc7233ddad6275d
- MD5 2ef6758c7dd4e90b30e3d4832bd45e0e
- SHA1 814b66b9c98151f9b0867c097c65e56a831f29f5
- SHA512 79460b111150c357dc3c0fc0457b027af30b946aab0d671f35f10d0ee888e51ead9f415170c76fcc1c81336aac481365e1b8055362f51b783fa3444f16d150df
- SSDEEP 3072:o6D3sRGj7s20bK3GNhhCz6JpJqe0CQkzJou7Q/ub7:oi3Rs20ughhs6JLqNCQgJp8/Y7
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2700 GConverter.exe 2700 GConverter.exe