Overview
overview
9Static
static
91a7e7c3045...18.exe
windows7-x64
61a7e7c3045...18.exe
windows10-2004-x64
6$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
1$PLUGINSDI...ll.dll
windows10-2004-x64
1$PLUGINSDI...cs.exe
windows7-x64
1$PLUGINSDI...cs.exe
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMP/QQLi...ex.exe
windows7-x64
3$TEMP/QQLi...ex.exe
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3ADManage.dll
windows7-x64
7ADManage.dll
windows10-2004-x64
7ATL80.dll
windows7-x64
1ATL80.dll
windows10-2004-x64
1AsyncTask.dll
windows7-x64
3AsyncTask.dll
windows10-2004-x64
3BugReporter.exe
windows7-x64
1BugReporter.exe
windows10-2004-x64
1CefSubProcess.dll
windows7-x64
3CefSubProcess.dll
windows10-2004-x64
3ChannelMgr.dll
windows7-x64
7ChannelMgr.dll
windows10-2004-x64
7Common.dll
windows7-x64
1Common.dll
windows10-2004-x64
1D3DX9_43.dll
windows7-x64
1D3DX9_43.dll
windows10-2004-x64
1Analysis
-
max time kernel
131s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
06-05-2024 03:13
Behavioral task
behavioral1
Sample
1a7e7c30455fe01bb74cc1beac9c20c1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1a7e7c30455fe01bb74cc1beac9c20c1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallHelper.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallHelper.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ProcDll.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ProcDll.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/Statistics.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/Statistics.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
$TEMP/QQLive/QQLiveSetupex.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
$TEMP/QQLive/QQLiveSetupex.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/ExProcDLL.dll
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/ExProcDLL.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
ADManage.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
ADManage.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
ATL80.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
ATL80.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
AsyncTask.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
AsyncTask.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
BugReporter.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
BugReporter.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
CefSubProcess.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
CefSubProcess.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
ChannelMgr.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
ChannelMgr.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral29
Sample
Common.dll
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
Common.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
D3DX9_43.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
D3DX9_43.dll
Resource
win10v2004-20240419-en
General
-
Target
$TEMP/QQLive/QQLiveSetupex.exe
-
Size
80KB
-
MD5
7a516ee64081f8f6b49438e46da1a877
-
SHA1
c30112e9095c9c50c686af1647ca2119f3739844
-
SHA256
f4c57ba172b81979defdfbc0ade6816d1ff80ceaced239bb3342618ac8f1f2c5
-
SHA512
b4706f9094a41c3b610a05240fe09cb04e51f6985266aaf7752be0cd81e0c581a651f9620f0c56462e708f4697d26a4d973add267d5ce187f7d91e2bc220b713
-
SSDEEP
1536:/zu0c7MqiYxWZQWe2KYbqWgPnZe4Romu/BRYRO8lsqpTuGmq6IzDYfGf:tc7MXYx4Qb5Y+WgPns45mYc83xzyGf
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).