Overview
overview
7Static
static
76a37efdff3...18.exe
windows7-x64
76a37efdff3...18.exe
windows10-2004-x64
7$PLUGINSDI...er.exe
windows7-x64
7$PLUGINSDI...er.exe
windows10-2004-x64
7$PLUGINSDI...BI.exe
windows7-x64
3$PLUGINSDI...BI.exe
windows10-2004-x64
3$PLUGINSDI...cc.exe
windows7-x64
7$PLUGINSDI...cc.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ed.htm
windows7-x64
1$PLUGINSDI...ed.htm
windows10-2004-x64
1$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...lp.dll
windows7-x64
1$PLUGINSDI...lp.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...os.dll
windows7-x64
3$PLUGINSDI...os.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...ay.dll
windows7-x64
7$PLUGINSDI...ay.dll
windows10-2004-x64
7$PLUGINSDI...te.exe
windows7-x64
7$PLUGINSDI...te.exe
windows10-2004-x64
7$PLUGINSDI...st.dll
windows7-x64
1$PLUGINSDI...st.dll
windows10-2004-x64
3$PLUGINSDIR/xml.dll
windows7-x64
3$PLUGINSDIR/xml.dll
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 07:38
Behavioral task
behavioral1
Sample
6a37efdff304091d8c708f2ae57be4ed_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6a37efdff304091d8c708f2ae57be4ed_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/$_354_/ProxyInstaller.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/$_354_/ProxyInstaller.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/$_355_/BI.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/$_355_/BI.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/$_356_/DownloadAcc.exe
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/$_356_/DownloadAcc.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/BunndleOfferManager.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/BunndleOfferManager.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/Failed.htm
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/Failed.htm
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/FirefoxHandler.dll
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/FirefoxHandler.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/execDos.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/execDos.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nsArray.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsArray.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/wajam_validate.exe
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/wajam_validate.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/webapphost.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/webapphost.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/xml.dll
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/xml.dll
Resource
win10v2004-20240508-en
General
-
Target
$PLUGINSDIR/$_356_/DownloadAcc.exe
-
Size
163KB
-
MD5
305af6be819ca06d6088fabfa3b4ce5e
-
SHA1
6e4c55b28863df05b6cc91072cbf2ab0865dd677
-
SHA256
16971b1bd82a3dc497f4d80a975c25e855a506a9490d0afb8661e220f8aad615
-
SHA512
9964507a6bc87b84d8ac089a8e948e4017f34912d18a05d1d871e7a6e64cf6170233650c986b4cde820b8847ecbd04e3354c24006af393687203a191b46d2a8f
-
SSDEEP
3072:8weqOYEUXPn2M+aUGHV0pn40pTEnVe+csybUnawkKJq:9EUXuYVEn4VVQ3uq
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
Processes:
DownloadAcc.exepid process 1612 DownloadAcc.exe 1612 DownloadAcc.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\nsz4577.tmp\DownloadACC.dllFilesize
218KB
MD5eada60fb6d31f337511fe0d385b8396c
SHA15e2da91eb2463c48e0f025428cc04154f11118db
SHA256f8b5dd8c68ab947d16dc8c43dc931a74b0230e411896009e06f5e6fc4d002422
SHA512b1373ce736a220ae873bbe8f887f85f5291c50c1148e9b00a1994f35129e2014f41e193bdba5b4e863d82b81ff0ac1251093ff4390a0a17e9526e8a2d0748d4e
-
C:\Users\Admin\AppData\Local\Temp\nsz4577.tmp\System.dllFilesize
17KB
MD5a4f38d1c7a480f5da1bb8097b8b939db
SHA1b3129c2a0e61881381463f5e0cbbffa573daa845
SHA256e1180e1e3344c7536150275e33de53dc1dd1a3ca03be66c4d4875fe5bcd4e436
SHA512fed89f7ee9364fc2f4b9f82c4563713497043947e98dbb03e7d755681adf3ae661aba80d08e59988a23695fc64481b69d9842b7ec7d2b572cc872c4c9957febc