d31f4f303ff76f45c1b2ff8c76e548c70880f3ad051b34b02f942f45967e9426 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

20d7aa58c4...18.exe

windows7-x64

7

20d7aa58c4...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$TEMP/tap-windows.exe

windows7-x64

7

$TEMP/tap-windows.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

bin/tapinstall.exe

windows7-x64

1

bin/tapinstall.exe

windows10-2004-x64

1

driver/tap0901.sys

windows7-x64

1

driver/tap0901.sys

windows10-2004-x64

1

bin/libeay32.dll

windows7-x64

1

bin/libeay32.dll

windows10-2004-x64

1

bin/liblzo2-2.dll

windows7-x64

1

bin/liblzo2-2.dll

windows10-2004-x64

1

bin/libpkc...-1.dll

windows7-x64

1

bin/libpkc...-1.dll

windows10-2004-x64

1

bin/openssl.exe

windows7-x64

1

bin/openssl.exe

windows10-2004-x64

1

bin/openvpn-gui.exe

windows7-x64

1

bin/openvpn-gui.exe

windows10-2004-x64

1

Analysis

max time kernel
141s
max time network
108s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07/05/2024, 14:45

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

20d7aa58c4a13119986f6de202b39971_JaffaCakes118.exe

Resource

win7-20240419-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

20d7aa58c4a13119986f6de202b39971_JaffaCakes118.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win7-20240419-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsExec.dll

Resource

win7-20240220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

$TEMP/tap-windows.exe

Resource

win7-20240221-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$TEMP/tap-windows.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win7-20240419-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

bin/tapinstall.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

bin/tapinstall.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

driver/tap0901.sys

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

driver/tap0901.sys

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

bin/libeay32.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

bin/libeay32.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

bin/liblzo2-2.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

bin/liblzo2-2.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

bin/libpkcs11-helper-1.dll

Resource

win7-20240215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

bin/libpkcs11-helper-1.dll

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

bin/openssl.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

bin/openssl.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

bin/openvpn-gui.exe

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

bin/openvpn-gui.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

bin/openssl.exe
Size

830KB
MD5

10b7f2358295a4cbbfc1565f0128a0d0
SHA1

5909482453e4a723dfee411c5a76c6080c5842df
SHA256

6892338341663859dea9061b5061162682904b63eca428943734b69227046a24
SHA512

63959143e626b6726293d9647b0ee2d2e7a205008f29dbc8b24e1dbad3d6b79d7a12905756d9ce19c813366ef00c7f6ea968573d3ead711af0bc604a509df1fa
SSDEEP

12288:OJvBCprt8p/0U0dFmPoDGI79fz/aOENJ5GAQ3Q:cat8p/0rdFQoDGI5fz/qJ5GAsQ

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\bin\openssl.exe
"C:\Users\Admin\AppData\Local\Temp\bin\openssl.exe"
1⤵
PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2988-0-0x0000000000401000-0x0000000000453000-memory.dmp

Filesize
328KB

Download
memory/2988-1-0x0000000000400000-0x000000000049F000-memory.dmp

Filesize
636KB

Download
memory/2988-4-0x000000006E400000-0x000000006E465000-memory.dmp

Filesize
404KB

Download
memory/2988-3-0x0000000063000000-0x00000000631B4000-memory.dmp

Filesize
1.7MB

Download

© 2018-2025

Terms | Privacy