Overview
overview
7Static
static
36e44038874...18.exe
windows7-x64
76e44038874...18.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$WINDIR/Sy...cs.dll
windows7-x64
1$WINDIR/Sy...cs.dll
windows10-2004-x64
1$_2_/SBIEB...ct.dll
windows7-x64
6$_2_/SBIEB...ct.dll
windows10-2004-x64
6$_2_/rlz_id.dll
windows7-x64
3$_2_/rlz_id.dll
windows10-2004-x64
3$_2_/sma.exe
windows7-x64
1$_2_/sma.exe
windows10-2004-x64
1$_2_/smci32.dll
windows7-x64
3$_2_/smci32.dll
windows10-2004-x64
1$_2_/smci64.dll
windows7-x64
1$_2_/smci64.dll
windows10-2004-x64
1$_2_/smi32.exe
windows7-x64
1$_2_/smi32.exe
windows10-2004-x64
1$_2_/smi64.exe
windows7-x64
1$_2_/smi64.exe
windows10-2004-x64
1$_2_/smu.exe
windows7-x64
1$_2_/smu.exe
windows10-2004-x64
7$_2_/smw.dll
windows7-x64
1$_2_/smw.dll
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24-05-2024 10:56
Static task
static1
Behavioral task
behavioral1
Sample
6e44038874ba9925eb17a7e65dae99ea_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6e44038874ba9925eb17a7e65dae99ea_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
$WINDIR/System32/rsrcs.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$WINDIR/System32/rsrcs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$_2_/SBIEBrowserHelperObject.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
$_2_/SBIEBrowserHelperObject.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$_2_/rlz_id.dll
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
$_2_/rlz_id.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$_2_/sma.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
$_2_/sma.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
$_2_/smci32.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$_2_/smci32.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$_2_/smci64.dll
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
$_2_/smci64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
$_2_/smi32.exe
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
$_2_/smi32.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
$_2_/smi64.exe
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
$_2_/smi64.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
$_2_/smu.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
$_2_/smu.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
$_2_/smw.dll
Resource
win7-20240215-en
Behavioral task
behavioral30
Sample
$_2_/smw.dll
Resource
win10v2004-20240508-en
General
-
Target
6e44038874ba9925eb17a7e65dae99ea_JaffaCakes118.exe
-
Size
3.0MB
-
MD5
6e44038874ba9925eb17a7e65dae99ea
-
SHA1
0169c3e0d6c4eb7a20609cea73ffccdfe29f1ec8
-
SHA256
b38764ac5a035a5d3357f2c68c65a090fbd5321c1309dedf73e4f540e5500f27
-
SHA512
9f7153012fbb60796fdf307ae5283c1e331cde2a0a3da598a86a042a9ae86aa6a7e9c0f7bc6387d8fc50ebb90c173165714ca4dccfea9380984f584fb7d5d1ed
-
SSDEEP
49152:ow1gJ2xOZi2p1x37cn6LYznadZT/eCYZYdrCyTD0hiJKMzDnpUpjSdKp+/4lpTOJ:xuJ2IZjDemvfBQjToJHLCpjGKD0lL
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
Processes:
6e44038874ba9925eb17a7e65dae99ea_JaffaCakes118.exepid process 2296 6e44038874ba9925eb17a7e65dae99ea_JaffaCakes118.exe 2296 6e44038874ba9925eb17a7e65dae99ea_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
6e44038874ba9925eb17a7e65dae99ea_JaffaCakes118.exepid process 2296 6e44038874ba9925eb17a7e65dae99ea_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11KB
MD5a436db0c473a087eb61ff5c53c34ba27
SHA165ea67e424e75f5065132b539c8b2eda88aa0506
SHA25675ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49
SHA512908f46a855480af6eacb2fb64de0e60b1e04bbb10b23992e2cf38a4cbebdcd7d3928c4c022d7ad9f7479265a8f426b93eef580afec95570e654c360d62f5e08d
-
Filesize
9KB
MD5e75ae7cfe06ff9692d98a934f6aa2d3c
SHA1d5fd4a59a39630c4693ce656bbbc0a55ede0a500
SHA2561f861aeb145ebbb9a2628414e6dca6b06d0bfb252f2de624b86814cfec8097d0
SHA512ab4998f8f6bbb60321d0c2aa941d4e85319901960297059bf0832cf84b18dfbb120c3aa71963b46d3be3b7c9602434cb23f9a961c00de02403b3f266b294d41b