Overview
overview
7Static
static
743e45b0caa...18.exe
windows7-x64
743e45b0caa...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3System/Sha...p3.exe
windows7-x64
7System/Sha...p3.exe
windows10-2004-x64
7System/Sha...ch.htm
windows7-x64
1System/Sha...ch.htm
windows10-2004-x64
1System/Sha...yt.htm
windows7-x64
1System/Sha...yt.htm
windows10-2004-x64
1System/Sha...ons.js
windows7-x64
3System/Sha...ons.js
windows10-2004-x64
3System/Sha...ion.js
windows7-x64
3System/Sha...ion.js
windows10-2004-x64
3System/Sha...ead.js
windows7-x64
3System/Sha...ead.js
windows10-2004-x64
3libeay32.dll
windows7-x64
1libeay32.dll
windows10-2004-x64
1sqlite3.dll
windows7-x64
3sqlite3.dll
windows10-2004-x64
3ssleay32.dll
windows7-x64
1ssleay32.dll
windows10-2004-x64
1Analysis
-
max time kernel
131s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
15-05-2024 01:04
Behavioral task
behavioral1
Sample
43e45b0caad8d0e8f94b8c7fc2c2bf8a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
43e45b0caad8d0e8f94b8c7fc2c2bf8a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
System/Shared/Utils/cmdmp3.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
System/Shared/Utils/cmdmp3.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
System/Shared/Utils/html/twitch.htm
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
System/Shared/Utils/html/twitch.htm
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
System/Shared/Utils/html/yt.htm
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
System/Shared/Utils/html/yt.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
System/Shared/Utils/js/definitions.js
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
System/Shared/Utils/js/definitions.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
System/Shared/Utils/js/execution.js
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
System/Shared/Utils/js/execution.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
System/Shared/Utils/js/thread.js
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
System/Shared/Utils/js/thread.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
libeay32.dll
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
libeay32.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
sqlite3.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
sqlite3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
ssleay32.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
ssleay32.dll
Resource
win10v2004-20240508-en
General
-
Target
System/Shared/Utils/js/execution.js
-
Size
15KB
-
MD5
71c5ff52d74e5ac8ca2b570ecab9dff0
-
SHA1
456fd6281181751cfbf12fa08f551c01e8282e01
-
SHA256
457fea5e38e50b3bf096e52b76497e2294f0f947b573f7b06671338a67a609b1
-
SHA512
8fc8ea27b3391118fc9b3ff6eb7cd6993e33f650557d16359f3fcf2a75cc3dbe3d5048282cf191a1ab2e648eb8140424430146f24237dd1b9f27d102bffdf440
-
SSDEEP
192:5vEhtdXKaBvGUftQywwIzJTrDRQArQEokVHhSRiha/2HIOI+mGQa6xLk9a/7uj2M:qht9vwU+ywwIdTv7V62oLbPRxLiiRG1
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs