Overview
overview
10Static
static
361c8ee9e80...18.exe
windows7-x64
1061c8ee9e80...18.exe
windows10-2004-x64
10$APPDATA/1...es.exe
windows7-x64
1$APPDATA/1...es.exe
windows10-2004-x64
1$APPDATA/1...de.dll
windows7-x64
1$APPDATA/1...de.dll
windows10-2004-x64
1$APPDATA/k...60.dll
windows7-x64
1$APPDATA/k...60.dll
windows10-2004-x64
1$APPDATA/k...te.exe
windows7-x64
1$APPDATA/k...te.exe
windows10-2004-x64
1$APPDATA/r...cr.dll
windows7-x64
1$APPDATA/r...cr.dll
windows10-2004-x64
1$APPDATA/r...ls.dll
windows7-x64
1$APPDATA/r...ls.dll
windows10-2004-x64
1$APPDATA/r...om.dll
windows7-x64
1$APPDATA/r...om.dll
windows10-2004-x64
1$TEMP/Blackface.dll
windows7-x64
10$TEMP/Blackface.dll
windows10-2004-x64
10$TEMP/am/a...UI.dll
windows7-x64
1$TEMP/am/a...UI.dll
windows10-2004-x64
1$TEMP/disp...60.dll
windows7-x64
1$TEMP/disp...60.dll
windows10-2004-x64
1$TEMP/mcha...60.dll
windows7-x64
1$TEMP/mcha...60.dll
windows10-2004-x64
1$TEMP/mcha...60.dll
windows7-x64
1$TEMP/mcha...60.dll
windows10-2004-x64
1$TEMP/mcha...ct.dll
windows7-x64
1$TEMP/mcha...ct.dll
windows10-2004-x64
1Analysis
-
max time kernel
139s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2024 02:44
Static task
static1
Behavioral task
behavioral1
Sample
61c8ee9e802a17db2db3c18ad499aa7e_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
61c8ee9e802a17db2db3c18ad499aa7e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$APPDATA/15/cvtres.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$APPDATA/15/cvtres.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$APPDATA/15/metade.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$APPDATA/15/metade.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$APPDATA/keywords/bs/50.opends60.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$APPDATA/keywords/bs/50.opends60.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$APPDATA/keywords/bs/aspnetstate.exe
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$APPDATA/keywords/bs/aspnetstate.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$APPDATA/rss/mscorsecr.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$APPDATA/rss/mscorsecr.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$APPDATA/rss/sbswminetutils.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$APPDATA/rss/sbswminetutils.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$APPDATA/rss/spcustom.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
$APPDATA/rss/spcustom.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
$TEMP/Blackface.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
$TEMP/Blackface.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
$TEMP/am/alumni_add/MicrosoftVSDesignerUI.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$TEMP/am/alumni_add/MicrosoftVSDesignerUI.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
$TEMP/dispatch/prev/52.opends60.dll
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
$TEMP/dispatch/prev/52.opends60.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
$TEMP/mchat/jpa/brands/33.opends60.dll
Resource
win7-20240215-en
Behavioral task
behavioral24
Sample
$TEMP/mchat/jpa/brands/33.opends60.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
$TEMP/mchat/jpa/brands/59.opends60.dll
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
$TEMP/mchat/jpa/brands/59.opends60.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
$TEMP/mchat/jpa/brands/MicrosoftVisualStudioVCProject.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
$TEMP/mchat/jpa/brands/MicrosoftVisualStudioVCProject.dll
Resource
win10v2004-20240508-en
General
-
Target
$TEMP/mchat/jpa/brands/MicrosoftVisualStudioVCProject.dll
-
Size
12KB
-
MD5
764476d7dd24d9985094b893703c286f
-
SHA1
5457c9241b5c6d5c75ba0d658d7eee9771e2e9df
-
SHA256
f495e676a55360c516c6c57e20b5839007ac25379b992ec33afcb36e3a5de6ad
-
SHA512
6fdaea500aa4d357a086149772f9e493bde963c94074c01d0797ac0e4c8ce3a50e30a59f0cdc9f162b0b514deed5d2638ad2896afb2e856dfdbbf650c3d1978c
-
SSDEEP
192:HuNyzZuu7Ykg2TTv4Sy9PlgV4gViTBUGbLJ37gmEXGk3y6BxtWr89WN:Hhsk9TESoXgViTBUG537sXx3y6LtWI9W
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$TEMP\mchat\jpa\brands\MicrosoftVisualStudioVCProject.dll,#11⤵PID:444
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4032,i,14648456027158448592,4956305794400220180,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:81⤵PID:980