Overview
overview
7Static
static
363e7c88b7d...18.exe
windows7-x64
363e7c88b7d...18.exe
windows10-2004-x64
3$APPDATA/L...ll.exe
windows7-x64
7$APPDATA/L...ll.exe
windows10-2004-x64
7$PLUGINSDI...ol.dll
windows7-x64
3$PLUGINSDI...ol.dll
windows10-2004-x64
3Excalibur.exe
windows7-x64
1Excalibur.exe
windows10-2004-x64
1ExcaliburGlossary.pdf
windows7-x64
1ExcaliburGlossary.pdf
windows10-2004-x64
1ExcaliburHelp.chm
windows7-x64
1ExcaliburHelp.chm
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-05-2024 16:08
Behavioral task
behavioral1
Sample
63e7c88b7d73aebd3eae532e134e213b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63e7c88b7d73aebd3eae532e134e213b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$APPDATA/Lighttwist Software/Excalibur/uninstall.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$APPDATA/Lighttwist Software/Excalibur/uninstall.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Excalibur.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
Excalibur.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
ExcaliburGlossary.pdf
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
ExcaliburGlossary.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
ExcaliburHelp.chm
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
ExcaliburHelp.chm
Resource
win10v2004-20240426-en
General
-
Target
63e7c88b7d73aebd3eae532e134e213b_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
63e7c88b7d73aebd3eae532e134e213b
-
SHA1
e8473fd9f0d1e521ebbf4a1ec859e8223a339d39
-
SHA256
57def8e75b76c6ea0c1237935885f9a8ef9cc74da91c2b4e1ba0a52f8d52e236
-
SHA512
2ecdacd180c0b56305624a03f54bee9b161300511e536dc7cd970f29824fbb1001224351dc8ce4ca559cf33c8352f2e8445910a1b688ded0b4e630701efa73cc
-
SSDEEP
24576:R9O/wECn5NCokiH97L11n5lw1MR1lTWQHNHO+LX+FmmZRZ2/9p24S9UDTjO:f23Cn5NbLtLjc23lTpHhOOX+FvGFpJ1e
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).