Overview
overview
10Static
static
10126fff08a5...18.exe
windows7-x64
7126fff08a5...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Analizador.dll
windows7-x64
3Analizador.dll
windows10-2004-x64
3Ayuda.exe
windows7-x64
7Ayuda.exe
windows10-2004-x64
7E-mail_Marketing.exe
windows7-x64
10E-mail_Marketing.exe
windows10-2004-x64
10Extractor.exe
windows7-x64
1Extractor.exe
windows10-2004-x64
1Seguridad.dll
windows7-x64
3Seguridad.dll
windows10-2004-x64
3Servidor_em.exe
windows7-x64
1Servidor_em.exe
windows10-2004-x64
1libeay32.dll
windows7-x64
1libeay32.dll
windows10-2004-x64
1ssleay32.dll
windows7-x64
1ssleay32.dll
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
04-05-2024 11:02
Behavioral task
behavioral1
Sample
126fff08a5955d42438875e98c23487e_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
126fff08a5955d42438875e98c23487e_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Analizador.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
Analizador.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Ayuda.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
Ayuda.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
E-mail_Marketing.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
E-mail_Marketing.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
Extractor.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Extractor.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
Seguridad.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
Seguridad.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Servidor_em.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Servidor_em.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
libeay32.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
libeay32.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
ssleay32.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
ssleay32.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
uninst.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
uninst.exe
Resource
win10v2004-20240226-en
General
-
Target
ssleay32.dll
-
Size
330KB
-
MD5
d34ecd24706dcfff478fe6fbe79026a9
-
SHA1
e11540244a99a5d7c95643f14cce042de1710ac7
-
SHA256
4a55ba7288d61c50d5f852c1d07877da46b036c49559e648006839a3cb932a55
-
SHA512
16de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915
-
SSDEEP
6144:5cJ4T6sWJwGzhK5smGmU+c0nxAF1ONpDlXLMNFXpF6IA/Tr/NE4PB0JvMCGomJCX:5cJ4esWJwGzhK5smGH+c0nxAF1OpDlbo
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 2256 wrote to memory of 2324 2256 rundll32.exe rundll32.exe PID 2256 wrote to memory of 2324 2256 rundll32.exe rundll32.exe PID 2256 wrote to memory of 2324 2256 rundll32.exe rundll32.exe PID 2256 wrote to memory of 2324 2256 rundll32.exe rundll32.exe PID 2256 wrote to memory of 2324 2256 rundll32.exe rundll32.exe PID 2256 wrote to memory of 2324 2256 rundll32.exe rundll32.exe PID 2256 wrote to memory of 2324 2256 rundll32.exe rundll32.exe