Overview
overview
10Static
static
10126fff08a5...18.exe
windows7-x64
7126fff08a5...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Analizador.dll
windows7-x64
3Analizador.dll
windows10-2004-x64
3Ayuda.exe
windows7-x64
7Ayuda.exe
windows10-2004-x64
7E-mail_Marketing.exe
windows7-x64
10E-mail_Marketing.exe
windows10-2004-x64
10Extractor.exe
windows7-x64
1Extractor.exe
windows10-2004-x64
1Seguridad.dll
windows7-x64
3Seguridad.dll
windows10-2004-x64
3Servidor_em.exe
windows7-x64
1Servidor_em.exe
windows10-2004-x64
1libeay32.dll
windows7-x64
1libeay32.dll
windows10-2004-x64
1ssleay32.dll
windows7-x64
1ssleay32.dll
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04-05-2024 11:02
Behavioral task
behavioral1
Sample
126fff08a5955d42438875e98c23487e_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
126fff08a5955d42438875e98c23487e_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Analizador.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
Analizador.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Ayuda.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
Ayuda.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
E-mail_Marketing.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
E-mail_Marketing.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
Extractor.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Extractor.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
Seguridad.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
Seguridad.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Servidor_em.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Servidor_em.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
libeay32.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
libeay32.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
ssleay32.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
ssleay32.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
uninst.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
uninst.exe
Resource
win10v2004-20240226-en
General
-
Target
libeay32.dll
-
Size
1.3MB
-
MD5
a724f5da0a0184b5668ef2d85a7346e0
-
SHA1
7181fffaa6b8f0f29cf7cdd1b1b859c2b956d399
-
SHA256
7f2284d3cca6171e50b47eabc4fddc8cd2c9641cab4edb12b26694427f559848
-
SHA512
d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2
-
SSDEEP
24576:2ztZk+KpPT5xWiqKZc6ZetcmQXFwYyzEuugANpopyeqwkVQ3I:HrPWzaDetcmQXFwYyugupozqbVQ3I
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 2352 wrote to memory of 2196 2352 rundll32.exe rundll32.exe PID 2352 wrote to memory of 2196 2352 rundll32.exe rundll32.exe PID 2352 wrote to memory of 2196 2352 rundll32.exe rundll32.exe PID 2352 wrote to memory of 2196 2352 rundll32.exe rundll32.exe PID 2352 wrote to memory of 2196 2352 rundll32.exe rundll32.exe PID 2352 wrote to memory of 2196 2352 rundll32.exe rundll32.exe PID 2352 wrote to memory of 2196 2352 rundll32.exe rundll32.exe