Overview
overview
7Static
static
323e0072bab...18.exe
windows7-x64
723e0072bab...18.exe
windows10-2004-x64
7$APPDATA/T...at.sys
windows7-x64
1$APPDATA/T...at.sys
windows10-2004-x64
1$APPDATA/T...64.sys
windows7-x64
1$APPDATA/T...64.sys
windows10-2004-x64
1$PLUGINSDI...et.dll
windows7-x64
3$PLUGINSDI...et.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows7-x64
1$PLUGINSDI...in.dll
windows10-2004-x64
1$PLUGINSDI...in.dll
windows7-x64
1$PLUGINSDI...in.dll
windows10-2004-x64
1$PLUGINSDI...in.dll
windows7-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...oc.dll
windows7-x64
3$PLUGINSDI...oc.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ws.dll
windows7-x64
3$PLUGINSDI...ws.dll
windows10-2004-x64
3Bmbt.dll
windows7-x64
3Bmbt.dll
windows10-2004-x64
3Bmcmon.dll
windows7-x64
3Bmcmon.dll
windows10-2004-x64
3Bmctr.dll
windows7-x64
1Bmctr.dll
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 07:47
Behavioral task
behavioral1
Sample
23e0072baba7b9ea62f2ed1fc1d52131_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23e0072baba7b9ea62f2ed1fc1d52131_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
$APPDATA/TXWiFiDriver/txwifinat.sys
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$APPDATA/TXWiFiDriver/txwifinat.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$APPDATA/TXWiFiDriver/txwifinat64.sys
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$APPDATA/TXWiFiDriver/txwifinat64.sys
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/Internet.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/Internet.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/TXSetupPlugin.dll
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/TXSetupPlugin.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/TXUninstallPlugin.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/TXUninstallPlugin.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/TXWindowPlugin.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/TXWindowPlugin.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/WndProc.dll
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/WndProc.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsWindows.dll
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsWindows.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
Bmbt.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Bmbt.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral29
Sample
Bmcmon.dll
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
Bmcmon.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral31
Sample
Bmctr.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Bmctr.dll
Resource
win10v2004-20240419-en
General
-
Target
$PLUGINSDIR/Internet.dll
-
Size
10KB
-
MD5
d4d774e8cf4c2dc669f4f2003334ccf4
-
SHA1
3759ad7e7195c40836e4a465b2db7749673a5a1d
-
SHA256
04c22ec18d614a76181709482a7307b2e59d4c45f42bf1f6313a974982e519be
-
SHA512
bb4898a1c457faf8b7a711c6040c959b1d8361b4dab758283c1f531d4155803f2a6fa3bd57cf8490cbec98499738deaa830dc44e0067d3da8970e34bee2d453e
-
SSDEEP
192:PLfR+vHCJ1oKnYe+PjPSrcy++v1Etr9ZCspE+TMQrFW:FmCznYPLltAeMh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1992 2380 WerFault.exe 28 -
Suspicious use of WriteProcessMemory 11 IoCs
description pid Process procid_target PID 1724 wrote to memory of 2380 1724 rundll32.exe 28 PID 1724 wrote to memory of 2380 1724 rundll32.exe 28 PID 1724 wrote to memory of 2380 1724 rundll32.exe 28 PID 1724 wrote to memory of 2380 1724 rundll32.exe 28 PID 1724 wrote to memory of 2380 1724 rundll32.exe 28 PID 1724 wrote to memory of 2380 1724 rundll32.exe 28 PID 1724 wrote to memory of 2380 1724 rundll32.exe 28 PID 2380 wrote to memory of 1992 2380 rundll32.exe 29 PID 2380 wrote to memory of 1992 2380 rundll32.exe 29 PID 2380 wrote to memory of 1992 2380 rundll32.exe 29 PID 2380 wrote to memory of 1992 2380 rundll32.exe 29
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\Internet.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1724 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\Internet.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:2380 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2380 -s 2323⤵
- Program crash
PID:1992
-
-