fe22e0a3594bff1aaa8daa3d102e840bde89ea342a3e16dfb1ee298f08e5696f | Triage

Submit
Reports

Overview

overview

7

Static

static

3

201037d0ab...18.exe

windows7-x64

7

201037d0ab...18.exe

windows10-2004-x64

7

$1/Tablacu...ff.exe

windows7-x64

1

$1/Tablacu...ff.exe

windows10-2004-x64

1

$3/$APPDAT...er.exe

windows7-x64

7

$3/$APPDAT...er.exe

windows10-2004-x64

7

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/Tablacus.exe

windows7-x64

4

$R1/Tablacus.exe

windows10-2004-x64

3

$R1/TablacusApp.exe

windows7-x64

1

$R1/TablacusApp.exe

windows10-2004-x64

1

$R1/script...und.js

windows7-x64

3

$R1/script...und.js

windows10-2004-x64

3

$R1/script/common.js

windows7-x64

3

$R1/script/common.js

windows10-2004-x64

3

$R1/script/consts.js

windows7-x64

3

$R1/script/consts.js

windows10-2004-x64

3

$R1/script...g.html

windows7-x64

1

$R1/script...g.html

windows10-2004-x64

1

$R1/script/index.html

windows7-x64

1

$R1/script/index.html

windows10-2004-x64

1

$R1/script/index.js

windows7-x64

3

$R1/script/index.js

windows10-2004-x64

3

$R1/script...n.html

windows7-x64

1

$R1/script...n.html

windows10-2004-x64

1

$R1/script...s.html

windows7-x64

1

$R1/script...s.html

windows10-2004-x64

1

$R1/script/options.js

windows7-x64

3

$R1/script/options.js

windows10-2004-x64

3

Analysis

max time kernel
136s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07-05-2024 08:41

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

201037d0abd9a98db87dd8c16abcd32c_JaffaCakes118.exe

Resource

win7-20240419-en

discovery persistence

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

201037d0abd9a98db87dd8c16abcd32c_JaffaCakes118.exe

Resource

win10v2004-20240426-en

discovery persistence

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral3

Sample

$1/TablacusInstallerStuff.exe

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

$1/TablacusInstallerStuff.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

$3/$APPDATA/TablacusApp/uninstaller.exe

Resource

win7-20231129-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

$3/$APPDATA/TablacusApp/uninstaller.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$R1/Tablacus.exe

Resource

win7-20231129-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

$R1/Tablacus.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

$R1/TablacusApp.exe

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

$R1/TablacusApp.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

$R1/script/background.js

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

$R1/script/background.js

Resource

win10v2004-20240419-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

$R1/script/common.js

Resource

win7-20240419-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

$R1/script/common.js

Resource

win10v2004-20240419-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

$R1/script/consts.js

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

$R1/script/consts.js

Resource

win10v2004-20240419-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

$R1/script/dialog.html

Resource

win7-20240220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

$R1/script/dialog.html

Resource

win10v2004-20240419-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral23

Sample

$R1/script/index.html

Resource

win7-20240221-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

$R1/script/index.html

Resource

win10v2004-20240419-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral25

Sample

$R1/script/index.js

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

$R1/script/index.js

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

$R1/script/location.html

Resource

win7-20240220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

$R1/script/location.html

Resource

win10v2004-20240419-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral29

Sample

$R1/script/options.html

Resource

win7-20240221-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

$R1/script/options.html

Resource

win10v2004-20240419-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral31

Sample

$R1/script/options.js

Resource

win7-20240215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

$R1/script/options.js

Resource

win10v2004-20240419-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

$R1/script/consts.js
Size

55KB
MD5

18bfa5281a2dd4a2cb35fbf924702898
SHA1

dd6faadceaca2d1e22548fcff96d49e60295b6a8
SHA256

1631247933478916abbe4a6bc1e1432d04a7f4d3e159c1566e69ec872d0f11c7
SHA512

8ae7a445fe2e601fedb4cf246fca4e22bccee5aa48d801437e095b81529f35af8b8955580796786866d751cf2b8fda3e494bc0d1d18f000c6e3374f6434766b9
SSDEEP

768:l0ivNHI18/CF8wVg0hIL/QupMEerjC4xPmtDV:aiSCwO7TyVrjC4xPS

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\$R1\script\consts.js
1⤵
PID:4524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy