Overview
overview
7Static
static
76d56f478df...18.exe
windows7-x64
76d56f478df...18.exe
windows10-2004-x64
7$PLUGINSDI...rol.js
windows7-x64
3$PLUGINSDI...rol.js
windows10-2004-x64
3$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...ist.js
windows7-x64
3$PLUGINSDI...ist.js
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...nit.js
windows7-x64
3$PLUGINSDI...nit.js
windows10-2004-x64
3$PLUGINSDI...fer.js
windows7-x64
3$PLUGINSDI...fer.js
windows10-2004-x64
3$PLUGINSDI...ge.dll
windows7-x64
3$PLUGINSDI...ge.dll
windows10-2004-x64
3$PLUGINSDI...n12.js
windows7-x64
3$PLUGINSDI...n12.js
windows10-2004-x64
3$PLUGINSDI...ime.js
windows7-x64
3$PLUGINSDI...ime.js
windows10-2004-x64
3$PLUGINSDI...ket.js
windows7-x64
3$PLUGINSDI...ket.js
windows10-2004-x64
3$PLUGINSDI...ftp.js
windows7-x64
3$PLUGINSDI...ftp.js
windows10-2004-x64
3$PLUGINSDI...ttp.js
windows7-x64
3$PLUGINSDI...ttp.js
windows10-2004-x64
3$PLUGINSDI.../tp.js
windows7-x64
3$PLUGINSDI.../tp.js
windows10-2004-x64
3$PLUGINSDI...re.dll
windows7-x64
1$PLUGINSDI...re.dll
windows10-2004-x64
1$PLUGINSDI...re.dll
windows7-x64
1$PLUGINSDI...re.dll
windows10-2004-x64
1Analysis
-
max time kernel
144s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
24-05-2024 04:32
Behavioral task
behavioral1
Sample
6d56f478df932204bcf02bf454aea839_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6d56f478df932204bcf02bf454aea839_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BrowserControl.js
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BrowserControl.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/DownloadList.js
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/DownloadList.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/GuiInit.js
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/GuiInit.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/IntegratedOffer.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/IntegratedOffer.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win7-20240419-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/LuaSocket/lua/socket/tp.js
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/LuaSocket/lua/socket/tp.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/LuaSocket/mime/core.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/LuaSocket/mime/core.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/LuaSocket/socket/core.dll
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/LuaSocket/socket/core.dll
Resource
win10v2004-20240426-en
General
-
Target
$PLUGINSDIR/GuiInit.js
-
Size
161KB
-
MD5
d277a99093503c0cbc86f1e29389fd7b
-
SHA1
139f5e61f5b063627eb6858ae8d9e078bc06ee34
-
SHA256
ab08d2313c05f9f58a3c6b6d5338e236313bdacdde469c9c7b98de7d230f31d4
-
SHA512
42c81601378f4029bd61eba735b3b772d4167afb4f5e129e5da5c7e15f694da2050f097bd9d98ea73ae146faebca70deb2b37ff6766f8ad2a74b2fa4b07e91e0
-
SSDEEP
1536:N5o/mQodXHRjrSoJ817jUnBBxhmT/ORMsowLnegMzrLyi2D4pgQ78xfMs:N5oORVuoJ81Y8OLCy1s2xUs
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\GuiInit.js1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4112 --field-trial-handle=2292,i,2103142837140538807,15881446839139365070,262144 --variations-seed-version /prefetch:81⤵