Overview
overview
8Static
static
368f15793cd...18.exe
windows7-x64
868f15793cd...18.exe
windows10-2004-x64
8$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3CashReminder.exe
windows7-x64
1CashReminder.exe
windows10-2004-x64
1ProtocolFilters.dll
windows7-x64
1ProtocolFilters.dll
windows10-2004-x64
3crfilterdrv.sys
windows7-x64
1crfilterdrv.sys
windows10-2004-x64
1libeay32.dll
windows7-x64
1libeay32.dll
windows10-2004-x64
1nfapi.dll
windows7-x64
1nfapi.dll
windows10-2004-x64
1ssleay32.dll
windows7-x64
1ssleay32.dll
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 23:04
Static task
static1
Behavioral task
behavioral1
Sample
68f15793cd17480d51f9502c42455820_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
68f15793cd17480d51f9502c42455820_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
CashReminder.exe
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
CashReminder.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
ProtocolFilters.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
ProtocolFilters.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
crfilterdrv.sys
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
crfilterdrv.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
libeay32.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
libeay32.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
nfapi.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
nfapi.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
ssleay32.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
ssleay32.dll
Resource
win10v2004-20240226-en
General
-
Target
libeay32.dll
-
Size
1.4MB
-
MD5
47a9d585dbf59f54574d978c4200a520
-
SHA1
ee99ab151751ee720833efb0c3a031d09bd13833
-
SHA256
421454bccf67fe6def1c13ff6314fd3fb69d667a421a1c1461209164bc9ad780
-
SHA512
d23516719ff06134c8614d27813b828b7815298404824623ae25a35dafde6515ebf80476405235933faad9bc70acfe5e295e8fabe5af091f544a23f3e2a0b565
-
SSDEEP
24576:mWjg+KpPcIQ7Wx3/BBO/xHZhq7itAyzNQiAUpo0e2u4jJGh90/+SQ:EUq7OJHZhqiZAUpo0e2uKJi0/+SQ
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 2244 wrote to memory of 2020 2244 rundll32.exe rundll32.exe PID 2244 wrote to memory of 2020 2244 rundll32.exe rundll32.exe PID 2244 wrote to memory of 2020 2244 rundll32.exe rundll32.exe PID 2244 wrote to memory of 2020 2244 rundll32.exe rundll32.exe PID 2244 wrote to memory of 2020 2244 rundll32.exe rundll32.exe PID 2244 wrote to memory of 2020 2244 rundll32.exe rundll32.exe PID 2244 wrote to memory of 2020 2244 rundll32.exe rundll32.exe