Overview
overview
7Static
static
70b6e00718c...18.exe
windows7-x64
70b6e00718c...18.exe
windows10-2004-x64
7$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...te.dll
windows7-x64
3$PLUGINSDI...te.dll
windows10-2004-x64
3$PLUGINSDI...om.dll
windows7-x64
7$PLUGINSDI...om.dll
windows10-2004-x64
7$PLUGINSDIR/xml.dll
windows7-x64
3$PLUGINSDIR/xml.dll
windows10-2004-x64
3AntiU.exe
windows7-x64
1AntiU.exe
windows10-2004-x64
1SecAddons.dll
windows7-x64
7SecAddons.dll
windows10-2004-x64
7uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7General
-
Target
0b6e00718c087490109fee0af0f7c64a_JaffaCakes118
-
Size
566KB
-
Sample
240501-26w8gahh2w
-
MD5
0b6e00718c087490109fee0af0f7c64a
-
SHA1
b1c0940cbf4f172bfeb6cb974d19a6ade74e7467
-
SHA256
30a29d5ef464a9503d469fecd3c99e9704500c10d0f9c3b1f303ccd9d13b2db5
-
SHA512
3801fa76d3e806dfc272e20d8c0d58de3e41fd0d9094c76ad1498eadaf9364708c69a1562b0318e3215ab4d6d0c0aafc7584e35e68af26397e4611a41263b08f
-
SSDEEP
12288:5Il0uCyRD4AVRPFwui+4arFu3RaaZUIng9wAGcTZzV3X:5y0uCvER96+xrFHaZUIg9wAGU
Behavioral task
behavioral1
Sample
0b6e00718c087490109fee0af0f7c64a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b6e00718c087490109fee0af0f7c64a_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DcryptDll.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DcryptDll.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/locate.dll
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/locate.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsRandom.dll
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsRandom.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/xml.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/xml.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
AntiU.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
AntiU.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
SecAddons.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
SecAddons.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
uninst.exe
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
uninst.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
0b6e00718c087490109fee0af0f7c64a_JaffaCakes118
-
Size
566KB
-
MD5
0b6e00718c087490109fee0af0f7c64a
-
SHA1
b1c0940cbf4f172bfeb6cb974d19a6ade74e7467
-
SHA256
30a29d5ef464a9503d469fecd3c99e9704500c10d0f9c3b1f303ccd9d13b2db5
-
SHA512
3801fa76d3e806dfc272e20d8c0d58de3e41fd0d9094c76ad1498eadaf9364708c69a1562b0318e3215ab4d6d0c0aafc7584e35e68af26397e4611a41263b08f
-
SSDEEP
12288:5Il0uCyRD4AVRPFwui+4arFu3RaaZUIng9wAGcTZzV3X:5y0uCvER96+xrFHaZUIg9wAGU
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/DcryptDll.dll
-
Size
14KB
-
MD5
904beebec2790ee2ca0c90fc448ac7e0
-
SHA1
40fabf1eb0a3b7168351c4514c5288216cb1566d
-
SHA256
f730d9385bf72eac5d579bcf1f7e4330f1d239ca1054d4ead48e9e363d9f4222
-
SHA512
8bdbbaaf73e396cf9fd9866b3e824b7e70c59a2bdefdb3236387e60d0e645d011265fe79fb193f6c0d6abe2e9c01260720c71cd8f068fcc4624760511c54efaa
-
SSDEEP
192:apY9VuCnNCbs8dNyHdrvr5T1KEtx/9ehuhiDTUkSv/DxRyeHk51I7n13Xm:aptMNUjyVvGWxauhiDDS3DnyK7nF
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781
-
SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f
-
SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
-
SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
-
SSDEEP
192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/NSISdl.dll
-
Size
14KB
-
MD5
254f13dfd61c5b7d2119eb2550491e1d
-
SHA1
5083f6804ee3475f3698ab9e68611b0128e22fd6
-
SHA256
fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28
-
SHA512
fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7
-
SSDEEP
192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
00a0194c20ee912257df53bfe258ee4a
-
SHA1
d7b4e319bc5119024690dc8230b9cc919b1b86b2
-
SHA256
dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
-
SHA512
3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/locate.dll
-
Size
17KB
-
MD5
7d3317f57c1a368480ace3c0ca804eeb
-
SHA1
d4c7e185bc64aac82339f51ba6c21cf0713c9f1a
-
SHA256
d88a04c1e39db583eaad727fd390fe599ab10198ee040bfbdd22daefadbd2372
-
SHA512
5598c2e6caa2f66edd48f8c8305e054d4b0740b5f2b7ed92cf197a13ac66ba99a32013d34b3c2e28d007ab7979eb90a50681324eb736b1410e7df1902e4ec32a
-
SSDEEP
384:ev/vPBkA6dK8wiLe45naPji7hpx2kRV+qgm:evyvwiNnGji7Xxjc8
Score3/10 -
-
-
Target
$PLUGINSDIR/nsRandom.dll
-
Size
21KB
-
MD5
ab467b8dfaa660a0f0e5b26e28af5735
-
SHA1
596abd2c31eaff3479edf2069db1c155b59ce74d
-
SHA256
db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
-
SHA512
7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301
-
SSDEEP
384:LCHDPMs4GdtyO5roguusMxUXiO3wOw95euooP2UgKbd9BvNtf:LCHD6Gh87MKXil/5r2U3z
Score7/10 -
-
-
Target
$PLUGINSDIR/xml.dll
-
Size
118KB
-
MD5
42df1fbaa87567adf2b4050805a1a545
-
SHA1
b892a6efbb39b7144248e0c0d79e53da474a9373
-
SHA256
e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845
-
SHA512
4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d
-
SSDEEP
1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK
Score3/10 -
-
-
Target
AntiU.exe
-
Size
1.5MB
-
MD5
be3adf38426cb6d4f47ec43ebba6301d
-
SHA1
c6c5e14f9bce586f8d22cfda038a81b3b3ce7047
-
SHA256
0307f9dbbb1edf873b0045497806a41597b349f3da440d45f3a6d54d18228ead
-
SHA512
14b07b6f0501776098fa473a54819cc5ea3e083d09153e14b7ed8e67212ef7b23363efa38808f3874b86f4266f3eb9e76b73e6342fac23f2c7fe9ceaf6b8b5e6
-
SSDEEP
49152:XuaLTDBxJcQWGNSWGNNGNt2OAGcJ5a2oKcxru7WutaoSlV0P83:+aLH
Score1/10 -
-
-
Target
SecAddons.dll
-
Size
169KB
-
MD5
69255f2db524506467421fc25e3e673f
-
SHA1
ba7c670d3bb16372f1bb6d34b895a0d943af4748
-
SHA256
e7b494805823f6deb6e2fcc5eaa8f9a9f66db5f92e9ba2af9ff36d0e79618bcf
-
SHA512
63a240d5141bc59d41e46b26b9cd94772415df33911c23ed7288dfafc436e31981d02ed3a070519b9a3b758bd3d2543d6e468fed620c33e862e7e83209e51129
-
SSDEEP
3072:LKtcnMaP7YGS/PD/NO9vxlrJykzctv7C0+m5jhb+CsIoutB71ynP:fnMaDYGS/7/OvxlrMkzGv7CTmjgIoSBG
-
-
-
Target
uninst.exe
-
Size
40KB
-
MD5
e6090cc36094dd5edd6d872ddf4e3467
-
SHA1
a990cb5c981cccde40784e0026fba78c2f1b2ae2
-
SHA256
eed074e7cda2a7e1e2cdb2a308e74ccf7d9882f674d7aab2230a67847ee876bb
-
SHA512
98521178370b2fa9697348fd3914d64d70e609542f42ff69f7d0effab77208eaf13795abe56383636bde553213bbfa97674e5a9d5dbff1b7df6e6b6f37cc500a
-
SSDEEP
768:ve3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJajcM6GqtS:W3cpyORJLuB4P4AJJm6jS
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-