Overview
overview
7Static
static
3257855b2b6...18.exe
windows7-x64
7257855b2b6...18.exe
windows10-2004-x64
7$1/$APPDAT...er.exe
windows7-x64
7$1/$APPDAT...er.exe
windows10-2004-x64
7$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$1/MediaPl...on.exe
windows7-x64
1$1/MediaPl...on.exe
windows10-2004-x64
1$1/MediaPl...ff.exe
windows7-x64
1$1/MediaPl...ff.exe
windows10-2004-x64
1$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$R1/mplayerc.exe
windows7-x64
1$R1/mplayerc.exe
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
08-05-2024 15:21
Static task
static1
Behavioral task
behavioral1
Sample
257855b2b6a8dbfd1cb0c5d486d11e2b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
257855b2b6a8dbfd1cb0c5d486d11e2b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$1/$APPDATA/MediaPlayerApplication2/uninstaller.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
$1/$APPDATA/MediaPlayerApplication2/uninstaller.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$1/MediaPlayerApplication.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$1/MediaPlayerApplication.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$1/MediaPlayerInstallerStuff.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$1/MediaPlayerInstallerStuff.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
$R1/mplayerc.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$R1/mplayerc.exe
Resource
win10v2004-20240508-en
General
-
Target
$R1/mplayerc.exe
-
Size
4.2MB
-
MD5
e379e2e71017a9c9dccc0745dcc93513
-
SHA1
a22081f0620fc1c93c2816b8e87559eb962d6dc4
-
SHA256
fe2bceb7f99dfc746c8f76aa9a3120ab6716cb17d356d5ef95f4fb84a69d8039
-
SHA512
427d35ac0438ae1d70b16b5ba155070a23712b63858b8bf21a780af4201eef6ed6a9df3a1e6f7abb3ac4d24c7b75ba84c1b994f8837eee289a5a6b5c7799605f
-
SSDEEP
98304:ttMTnL3f/iIcTXZR1qU7FWG9MMVbFqo5cs+lzamVqIARzAXos3wcYM1dYoUAxdEr:nkbeNR9Lqo5cs+lzamVqIARzAXos3wcE
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4568 mplayerc.exe 4568 mplayerc.exe 4568 mplayerc.exe