Overview
overview
10Static
static
362785703db...18.exe
windows7-x64
1062785703db...18.exe
windows10-2004-x64
10$TEMP/35.opends60.dll
windows7-x64
1$TEMP/35.opends60.dll
windows10-2004-x64
1$TEMP/Ombudsman.dll
windows7-x64
1$TEMP/Ombudsman.dll
windows10-2004-x64
1$TEMP/PermCalc.exe
windows7-x64
1$TEMP/PermCalc.exe
windows10-2004-x64
1$TEMP/TreeCell.js
windows7-x64
3$TEMP/TreeCell.js
windows10-2004-x64
3$TEMP/User...er.exe
windows7-x64
1$TEMP/User...er.exe
windows10-2004-x64
1$TEMP/ancon.exe
windows7-x64
10$TEMP/ancon.exe
windows10-2004-x64
10$TEMP/conmanui.dll
windows7-x64
1$TEMP/conmanui.dll
windows10-2004-x64
1$TEMP/makecert.exe
windows7-x64
1$TEMP/makecert.exe
windows10-2004-x64
1$TEMP/ubi-...36.pyc
windows7-x64
3$TEMP/ubi-...36.pyc
windows10-2004-x64
3$TEMP/vcbuild.dll
windows7-x64
1$TEMP/vcbuild.dll
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
21-05-2024 07:16
Static task
static1
Behavioral task
behavioral1
Sample
62785703dbd48226259b994a57c0842c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
62785703dbd48226259b994a57c0842c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$TEMP/35.opends60.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$TEMP/35.opends60.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$TEMP/Ombudsman.dll
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
$TEMP/Ombudsman.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$TEMP/PermCalc.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$TEMP/PermCalc.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$TEMP/TreeCell.js
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$TEMP/TreeCell.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
$TEMP/UserControlTestContainer.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$TEMP/UserControlTestContainer.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$TEMP/ancon.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
$TEMP/ancon.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$TEMP/conmanui.dll
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
$TEMP/conmanui.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
$TEMP/makecert.exe
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
$TEMP/makecert.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
$TEMP/ubi-console-setup.cpython-36.pyc
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$TEMP/ubi-console-setup.cpython-36.pyc
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$TEMP/vcbuild.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
$TEMP/vcbuild.dll
Resource
win10v2004-20240508-en
General
-
Target
$TEMP/TreeCell.js
-
Size
4KB
-
MD5
4d141a6395854dd8e40683514af9aac0
-
SHA1
cc71c861ca5106b71e649585d2c8733397a6c4ee
-
SHA256
f438b49a1a8e1ad9620dc5010fd0df3d2221e03eb2c873d35a1dc1fa97d87d50
-
SHA512
0de5e55003b064c3db0e9d753e81438f0394fd7e4df23f4c4a799bcef02eb09efa91e0ed2b5d1be8c6a6fadbb2f443b1395543978c6b8435e776082d5ef2d181
-
SSDEEP
96:KD8UfqOG6Q8j9YOCaLharzcqOZ9baKES4Zm8/j5:k8UfqOG6ZjKO7LharzcNZpUfJj5
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs