Overview
overview
7Static
static
74d43fefdff...18.exe
windows7-x64
74d43fefdff...18.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$_2_/SBIEB...ct.dll
windows7-x64
6$_2_/SBIEB...ct.dll
windows10-2004-x64
6$_2_/sma.exe
windows7-x64
1$_2_/sma.exe
windows10-2004-x64
1$_2_/smci32.dll
windows7-x64
1$_2_/smci32.dll
windows10-2004-x64
1$_2_/smci64.dll
windows7-x64
1$_2_/smci64.dll
windows10-2004-x64
1$_2_/smei32.dll
windows7-x64
3$_2_/smei32.dll
windows10-2004-x64
1$_2_/smei64.dll
windows7-x64
1$_2_/smei64.dll
windows10-2004-x64
1$_2_/smfi32.dll
windows7-x64
1$_2_/smfi32.dll
windows10-2004-x64
1$_2_/smfi64.dll
windows7-x64
1$_2_/smfi64.dll
windows10-2004-x64
1$_2_/smi32.exe
windows7-x64
1$_2_/smi32.exe
windows10-2004-x64
1$_2_/smi64.exe
windows7-x64
1$_2_/smi64.exe
windows10-2004-x64
1$_2_/smoi32.dll
windows7-x64
1$_2_/smoi32.dll
windows10-2004-x64
1$_2_/smoi64.dll
windows7-x64
1$_2_/smoi64.dll
windows10-2004-x64
1Analysis
- max time kernel
139s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
16/05/2024, 22:13
Behavioral task
behavioral1
Sample
4d43fefdff96dcbf5952ab4ece7b7095_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral2
Sample
4d43fefdff96dcbf5952ab4ece7b7095_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$_2_/SBIEBrowserHelperObject.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral10
Sample
$_2_/SBIEBrowserHelperObject.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$_2_/sma.exe
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral12
Sample
$_2_/sma.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$_2_/smci32.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral14
Sample
$_2_/smci32.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$_2_/smci64.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral16
Sample
$_2_/smci64.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
$_2_/smei32.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral18
Sample
$_2_/smei32.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
$_2_/smei64.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral20
Sample
$_2_/smei64.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
$_2_/smfi32.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral22
Sample
$_2_/smfi32.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
$_2_/smfi64.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral24
Sample
$_2_/smfi64.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
$_2_/smi32.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral26
Sample
$_2_/smi32.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
$_2_/smi64.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral28
Sample
$_2_/smi64.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
$_2_/smoi32.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral30
Sample
$_2_/smoi32.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
$_2_/smoi64.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral32
Sample
$_2_/smoi64.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
General
- Target $_2_/smi64.exe
- Size 98KB
- Sample240516-145amaba78
- SHA256 8e15b1bccdebd2a67d93246a86419da1db13bfd56a348f5cc212516c6f291359
- MD5 efa6cf84433a6ea42581168417eafa25
- SHA1 3ab26e865872391c3a5a875ad22dc9788c0dc469
- SHA512 972e8d583cb57dfa51de2ec065b6c0b16ec33e6aab270360dce8ca11af955c233f5743231c849b86861b8d51c73b0956c2735532e9ee13cfe02b4c96333f4db5
- SSDEEP 1536:qG+sFhvoYz9n0QO+CXRTzeXVitXCGX950rkDpTwFH5sO+2s4S:q2voYB0QOZXRTwiJCGP0MTwFZsO+2nS
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\$_2_\smi64.exe"C:\Users\Admin\AppData\Local\Temp\$_2_\smi64.exe"1⤵PID:4840
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4200,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:81⤵PID:1460