5c8dbf03a1f45997b2e786379007835b15804920bd6ae064faf94f3861737bb0 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

42af8a31ea...18.exe

windows7-x64

7

42af8a31ea...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

QtCore4.dll

windows7-x64

3

QtCore4.dll

windows10-2004-x64

3

QtNetwork4.dll

windows7-x64

3

QtNetwork4.dll

windows10-2004-x64

3

UninstallMini.exe

windows7-x64

1

UninstallMini.exe

windows10-2004-x64

1

ayprivoxy.exe

windows7-x64

1

ayprivoxy.exe

windows10-2004-x64

1

aysocks5.exe

windows7-x64

1

aysocks5.exe

windows10-2004-x64

1

jiasuqi.exe

windows7-x64

1

jiasuqi.exe

windows10-2004-x64

1

jiasuqiEx.exe

windows7-x64

1

jiasuqiEx.exe

windows10-2004-x64

1

jsqService.exe

windows7-x64

1

jsqService.exe

windows10-2004-x64

3

mgwz.dll

windows7-x64

3

mgwz.dll

windows10-2004-x64

3

msvcp100.dll

windows7-x64

3

msvcp100.dll

windows10-2004-x64

3

msvcr100.dll

windows7-x64

3

msvcr100.dll

windows10-2004-x64

3

Analysis

max time kernel
98s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
14-05-2024 19:23

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

42af8a31ea73e1f7322b1a86f58c7f18_JaffaCakes118.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

42af8a31ea73e1f7322b1a86f58c7f18_JaffaCakes118.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

QtCore4.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

QtCore4.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

QtNetwork4.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

QtNetwork4.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

UninstallMini.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

UninstallMini.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

ayprivoxy.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

ayprivoxy.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

aysocks5.exe

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

aysocks5.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

jiasuqi.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

jiasuqi.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

jiasuqiEx.exe

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

jiasuqiEx.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

jsqService.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

jsqService.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

mgwz.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

mgwz.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

msvcp100.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

msvcp100.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

msvcr100.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

msvcr100.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

UninstallMini.exe
Size

1.4MB
MD5

6e26a940c1331d1205815fa17315415f
SHA1

d381cea4547a049cf6964e497445b77f47173411
SHA256

f27af16873f70b7af8b33d79d34753f0cdb95313a257cb006714fb8f5a9540fa
SHA512

b0d931ea8088df33cac69e05e94585c9b75cfd31d74139bc43413194f1766d9073aaba170f239fb560ba65d2c037fd0990e26d097a70e7c025a7a292f02bec9c
SSDEEP

24576:xYDnUUTrtf5A32TBqr2Aj5zM8+P1YmOAUGcS9nZn6jH8lTctKe/oPF38:OrXp5A3du17OAUGbkjclTkKgg8

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\UninstallMini.exe
"C:\Users\Admin\AppData\Local\Temp\UninstallMini.exe"
1⤵
PID:4968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4968-0-0x0000000002850000-0x0000000002860000-memory.dmp

Filesize
64KB

Download
memory/4968-1-0x0000000002850000-0x0000000002860000-memory.dmp

Filesize
64KB

Download

© 2018-2024

Terms | Privacy