Overview
overview
7Static
static
3075232b2c7...18.exe
windows7-x64
7075232b2c7...18.exe
windows10-2004-x64
7iconAnimate.exe
windows7-x64
1iconAnimate.exe
windows10-2004-x64
1iconTips.exe
windows7-x64
1iconTips.exe
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3wukong.exe
windows7-x64
1wukong.exe
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
29/04/2024, 09:18
Static task
static1
Behavioral task
behavioral1
Sample
075232b2c7f732b51188290a88bdde55_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
075232b2c7f732b51188290a88bdde55_JaffaCakes118.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
iconAnimate.exe
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral4
Sample
iconAnimate.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
iconTips.exe
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral6
Sample
iconTips.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
uninst.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral8
Sample
uninst.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral12
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
wukong.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
wukong.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
General
-
Target
iconTips.exe
-
Size
257KB
-
MD5
bd2a944d69eeb1b2bb86f825eeb289a4
-
SHA1
3b04ebd33de312044fff329afc18f68c39ce8606
-
SHA256
dc948d6b754a7fbc0e7a643939ba152f9ee8691e54661ef06632c79f5c49a4be
-
SHA512
f1759c3f6efb8a387d30515062036475bfa6b3fefaf0723b1b99dca1ca0a0a859c59e783737479e5572de77ca76fe010d9a7015c09af6b401ca04973e4923226
-
SSDEEP
6144:MF7yS4Vab+O4mAhFgpbMLifKS0DUUWZHhI7c0qL7DYOTTmF8Ng5hMTZj1nJQm8tS:58OEBCNUU1dk
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1772 iconTips.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21 PID 1772 wrote to memory of 1204 1772 iconTips.exe 21