Overview
overview
10Static
static
321f13b750f...18.exe
windows7-x64
1021f13b750f...18.exe
windows10-2004-x64
7$1/$OUTDIR...er.exe
windows7-x64
7$1/$OUTDIR...er.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
31816850460.js
windows7-x64
31816850460.js
windows10-2004-x64
3211632070006.html
windows7-x64
1211632070006.html
windows10-2004-x64
1about.html
windows7-x64
1about.html
windows10-2004-x64
1api.js
windows7-x64
3api.js
windows10-2004-x64
3begin_pass...2.html
windows7-x64
1begin_pass...2.html
windows10-2004-x64
1begin_pass...8.html
windows7-x64
1begin_pass...8.html
windows10-2004-x64
1frame3.html
windows7-x64
1frame3.html
windows10-2004-x64
1gerenxinwe...6.html
windows7-x64
1gerenxinwe...6.html
windows10-2004-x64
1index1259653512.html
windows7-x64
1index1259653512.html
windows10-2004-x64
1jquery.pla...f95.js
windows7-x64
3jquery.pla...f95.js
windows10-2004-x64
3login390722190.html
windows7-x64
1login390722190.html
windows10-2004-x64
1lvyouhuodong.html
windows7-x64
1lvyouhuodong.html
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07-05-2024 22:13
Static task
static1
Behavioral task
behavioral1
Sample
21f13b750f2c71bb815816866eee55b9_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
21f13b750f2c71bb815816866eee55b9_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
$1/$OUTDIR/sftp_plugin/tc_sftp_uninstaller.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$1/$OUTDIR/sftp_plugin/tc_sftp_uninstaller.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
1816850460.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
1816850460.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
211632070006.html
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
211632070006.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
about.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
about.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
api.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
api.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
begin_password_reset1581078162.html
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
begin_password_reset1581078162.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
begin_password_reset727114948.html
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
begin_password_reset727114948.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
frame3.html
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
frame3.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
gerenxinwen1732464246.html
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
gerenxinwen1732464246.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
index1259653512.html
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
index1259653512.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
jquery.placeholder-fd5cdc5d60cadb4e97cb85609e889f95.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
jquery.placeholder-fd5cdc5d60cadb4e97cb85609e889f95.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
login390722190.html
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
login390722190.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral31
Sample
lvyouhuodong.html
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
lvyouhuodong.html
Resource
win10v2004-20240419-en
General
-
Target
jquery.placeholder-fd5cdc5d60cadb4e97cb85609e889f95.js
-
Size
4KB
-
MD5
fd5cdc5d60cadb4e97cb85609e889f95
-
SHA1
ce9c52b9a31c2878f38d631b4b251a9c7567b8ee
-
SHA256
a7e550ea94d8930bc1ba5f68490baa8c22f4e09110dfde7b1ab68684819fb2f8
-
SHA512
b7097d91dfb0088fb7d935b578c17f8b7faf4d60ccad2bcf61437bd13366f94558a0ea6736bb086ccee79de87ca6fac4e6e370c25f676931af9c0aa5e5a97e7a
-
SSDEEP
96:aHfua8hCHVhVEMvH+sQtqnBq7zqrzhPqAqYzF00JHMZLKJfrA3b7NjqiW8oWvlHL:MfdheJonkirz0NE6Lv3s9WvFL
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs