Overview
overview
7Static
static
78df1aa737b...18.exe
windows7-x64
48df1aa737b...18.exe
windows10-2004-x64
4$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$_4_/TeamViewer_.exe
windows7-x64
7$_4_/TeamViewer_.exe
windows10-2004-x64
7$PLUGINSDI...64.dll
windows7-x64
3$PLUGINSDI...64.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...rb.dll
windows7-x64
3$PLUGINSDI...rb.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...Ex.dll
windows7-x64
3$PLUGINSDI...Ex.dll
windows10-2004-x64
3General
-
Target
8df1aa737b8c6c4ea21a6578057af930_JaffaCakes118
-
Size
21.8MB
-
Sample
240602-nq7sdace67
-
MD5
8df1aa737b8c6c4ea21a6578057af930
-
SHA1
4f09fbe15329843b0000009255c82d2eb7124157
-
SHA256
0d1a6735e5f1522903ff8e5c48fbad41b556cdfa796b836a03071fa15a9c57ff
-
SHA512
dcda3fa4002719b09d328e2c68718adbbb2267e815ea2a6b864f4161f51a8f229ef108bf56a52c4f8e078c7bccaf27c18089b83a86805b816de568a40f37b1a4
-
SSDEEP
393216:FAjMwMg1BIXOuljaia3hs5nnIzPqPvdPUkGVyXOWUSOCRhNjjgMO3tKu:ijMwV1xEeia3u5IzPqhNGUXOWdRhNnNQ
Behavioral task
behavioral1
Sample
8df1aa737b8c6c4ea21a6578057af930_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8df1aa737b8c6c4ea21a6578057af930_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/TvGetVersion.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/TvGetVersion.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$_4_/TeamViewer_.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$_4_/TeamViewer_.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/Base64.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/Base64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/InvokeShellVerb.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/InvokeShellVerb.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/TvGetVersion.dll
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/TvGetVersion.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/dialogsEx.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/dialogsEx.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
8df1aa737b8c6c4ea21a6578057af930_JaffaCakes118
-
Size
21.8MB
-
MD5
8df1aa737b8c6c4ea21a6578057af930
-
SHA1
4f09fbe15329843b0000009255c82d2eb7124157
-
SHA256
0d1a6735e5f1522903ff8e5c48fbad41b556cdfa796b836a03071fa15a9c57ff
-
SHA512
dcda3fa4002719b09d328e2c68718adbbb2267e815ea2a6b864f4161f51a8f229ef108bf56a52c4f8e078c7bccaf27c18089b83a86805b816de568a40f37b1a4
-
SSDEEP
393216:FAjMwMg1BIXOuljaia3hs5nnIzPqPvdPUkGVyXOWUSOCRhNjjgMO3tKu:ijMwV1xEeia3u5IzPqhNGUXOWdRhNnNQ
Score4/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
b8992e497d57001ddf100f9c397fcef5
-
SHA1
e26ddf101a2ec5027975d2909306457c6f61cfbd
-
SHA256
98bcd1dd88642f4dd36a300c76ebb1ddfbbbc5bfc7e3b6d7435dc6d6e030c13b
-
SHA512
8823b1904dccfaf031068102cb1def7958a057f49ff369f0e061f1b4db2090021aa620bb8442a2a6ac9355bb74ee54371dc2599c20dc723755a46ede81533a3c
-
SSDEEP
192:PPtkumJX7zB22kGwfy0mtVgkCPOs81un:E702k5qpds8Qn
Score3/10 -
-
-
Target
$PLUGINSDIR/TvGetVersion.dll
-
Size
193KB
-
MD5
d2ac4ca57f4b624c444c17e8a353deaa
-
SHA1
d713b2b4ff0cec01b5c89bd26127012eed460a32
-
SHA256
a4db659c6265ba7efbbd4906257ef6cdb8f9b1fefba78f01425390729ab3d1f2
-
SHA512
db991671548d9f239acf7b77b47ccbf438c626e803026a68d7c67ec5b3923195c8745f6adbe730fe4c049237217849f8f9f47fc335cf94b1413a7debc9b8d9b1
-
SSDEEP
3072:CpotVlHTjsWb8CCIzLumhachhNwetDe0KQWi+ndms6fYXqR697GX3dcK7TD5:ak/uYhhvx4JndUgXO6wiWD
Score3/10 -
-
-
Target
$_4_/TeamViewer_.exe
-
Size
21.1MB
-
MD5
67a3aba3d9d1b3c06f7d29f88462f905
-
SHA1
9cad747d67a8f87086207f443a7f1083ae922ea4
-
SHA256
41e3451fa7dcec308581ed259849523a9f8cc5d022290c14a70f632ec55208ba
-
SHA512
b29c1be4025aced75b6dda309b69370403ec6a16f0bd0368bd9011cc86c23db01e438fa3c7dcbe3b877478f0527c11e0b553a5cf2a4158be9ff8687110ec99bf
-
SSDEEP
393216:OwMg1BIXOuljaia3hs5nnIzPqPvdPUkGVyXOWUSOCRhNjjgMO3tK/:OwV1xEeia3u5IzPqhNGUXOWdRhNnNkk/
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/Base64.dll
-
Size
3KB
-
MD5
20dc0e30cc3a715e100f8662d09b71a9
-
SHA1
c40b9158a8c8e28d4ce7ba73a6f2e69368afc389
-
SHA256
015f30080a8a8ef5c9ee8751400100e3c8abb48d5c8ab5208a48daae39d22e9f
-
SHA512
2e455dfa373f91b563dedd2e043f8730e686bb1a6ae45c488e5ea5b9cbb0c7658b767b2e751008757c62537f8b70396aae79721dcbf13e493daaf6cebc5500bd
Score3/10 -
-
-
Target
$PLUGINSDIR/FindProcDLL.dll
-
Size
27KB
-
MD5
6f73b00aef6c49eac62128ef3eca677e
-
SHA1
1b6aff67d570e5ee61af2376247590eb49b728a1
-
SHA256
6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
-
SHA512
678fc4bf7d345eeb99a3420ec7d0071eaba302845e93b48527d9a2a9c406709cc44ec74d6a889e25a8351a463803f8713a833df3a1707a5ad50db05240a32938
-
SSDEEP
384:DZoRF0XXUuJReQg0Tw67ADWBTgmldIogUD3GLgFmyaX/fVYcWJQCDmrinogRdBl:DZaF0HtTwuz9yu3KgwRX1nWJ1q+noI
Score3/10 -
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
15KB
-
MD5
033ee34c40e8fa85bf2739bcb2f3e186
-
SHA1
2ca942f35f77f37df3fc6097acac34f2e77341b7
-
SHA256
c91c1796338a265b49039c0b2c7a312d764b99e5174fb2dae455ca54f8f41ec7
-
SHA512
2204e0b8721b8d85c51bd068b1695b16ee096bfc1d1cd5843f48fd04032aeee2b6a91ce82978a4b3414f3d966ec5b36fb337a4149dae3a1d0445935d964d247f
-
SSDEEP
384:ErC43tPegZ3eBaRwCPOYY7nNYXCT/Yosa:EmTgZ3eBTCmrnNAh
Score3/10 -
-
-
Target
$PLUGINSDIR/InvokeShellVerb.dll
-
Size
4KB
-
MD5
1a6e1ea7e90e50d9a18e034e7cde41a6
-
SHA1
93148d67fc2cee4537f749a8c98a0735065241a8
-
SHA256
2fddc8b8ab4bf4838ea374d25e4cb9e83362c3f1cb24f380137d14c814d56169
-
SHA512
53d35e9e4a0d45a5b37da7952f7bf8c26666fa57748c3d292fd154e40a602f08ad55735cefe9bdf043e03e3eff3e58d603bd9980ef291b3c5f409228dd5ba872
Score3/10 -
-
-
Target
$PLUGINSDIR/KillProcDLL.dll
-
Size
36KB
-
MD5
1cc87d2b5a79b18f133b4f944e2f2f74
-
SHA1
98e0ddb727c76e06be1668434d754e5b80a0c154
-
SHA256
de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
-
SHA512
d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
-
SSDEEP
384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
Score3/10 -
-
-
Target
$PLUGINSDIR/LangDLL.dll
-
Size
5KB
-
MD5
174708997758321cf926b69318c6c3f5
-
SHA1
645488089bf320f6864e0d0bc284c85216e56fbd
-
SHA256
f577b66492e97c7b8bf515398d8deb745abafd74f56fc03e67fce248ebbeb873
-
SHA512
214433597e04ca1ff9b4fe092d5d2997707a7c56f0f82c85d586088a200e4455028f3b9427d87b4f06f9252557d5be4b7a9138ea6a8d045df6209421fd8ca054
-
SSDEEP
48:S46+/ZTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mCofjLl:zDuPbOBtWZBV8jAWiAJCdv2CmpL
Score3/10 -
-
-
Target
$PLUGINSDIR/StartMenu.dll
-
Size
7KB
-
MD5
fb062fbb33102c79fdfc815d634ea776
-
SHA1
1f3d9ce02328297cda1aa1b1093efb5d5aa47ff4
-
SHA256
77b6d60b2a3f5113a79bd28fbc6d662f37bc0481210194beda90461291ddb704
-
SHA512
a5a3a0702be8b0d2037ea320cd1d231e6f2f5012178578ba40e06d16313fc32c431a5560efc8919f81ba4631d02e64a2b1faaeb6da374dd1b6ace8c344dc550d
-
SSDEEP
96:H8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/23lkCTcaqHCI:cZIKXgk+cx6QYFkAylncviI
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
0ff2d70cfdc8095ea99ca2dabbec3cd7
-
SHA1
10c51496d37cecd0e8a503a5a9bb2329d9b38116
-
SHA256
982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
-
SHA512
cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
-
SSDEEP
192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
Score3/10 -
-
-
Target
$PLUGINSDIR/TvGetVersion.dll
-
Size
210KB
-
MD5
05f51bc8ffb2c8f5a2825bf5680301cf
-
SHA1
30f7f77dce1fb3526142780e9f5bd5c11622d6b6
-
SHA256
c67cbd5e35e1ce0c7ba17c55d8e2bc33afd5e0a68774554a1fe7216d330c709e
-
SHA512
1e041aaa37dd00414ad955ebc8c0f708589014d2085a5a0b95a31f4d694bb1cc4994bb1324d4b983cbad0449fb0a05560d82c60fdbfc78be67ff61275e451233
-
SSDEEP
3072:4J7KJkcma0VkpOG/374vnriZ1nmTaK405/+ncMCQ2bDh:6EkcmYOG/37MnGZoeKxpuuQ
Score3/10 -
-
-
Target
$PLUGINSDIR/UAC.dll
-
Size
18KB
-
MD5
113c5f02686d865bc9e8332350274fd1
-
SHA1
4fa4414666f8091e327adb4d81a98a0d6e2e254a
-
SHA256
0d21041a1b5cd9f9968fc1d457c78a802c9c5a23f375327e833501b65bcd095d
-
SHA512
e190d1ee50c0b2446b14f0d9994a0ce58f5dbd2aa5d579f11b3a342da1d4abf0f833a0415d3817636b237930f314be54e4c85b4db4a9b4a3e532980ea9c91284
-
SSDEEP
192:5cdcpry0igQ1Ii1rzn6U4gbfW6irWP+vOg7XRSEi+OPLjte86jugnincl0Nr90Og:WqVibvTh4qnFP+OPEzinclP+
Score3/10 -
-
-
Target
$PLUGINSDIR/UserInfo.dll
-
Size
4KB
-
MD5
9b0db6a6056e8e51ac35e602aeab769f
-
SHA1
b541c6d2635141cdc3a74f59d55db8df4a92e7ac
-
SHA256
925d80c31702a95d58ede91ee97fd842de78ca6dde69156a6c1a755fba93cd5c
-
SHA512
83fe9d346835940a37e0e0a18d041c9d13fc95a0e9ece3bc18e555cf0e8e7ddf7b42dba422b1e55ace31db3c9fc807e0b44e93b8f07f5acb943eaaf77b4f0ac6
Score3/10 -
-
-
Target
$PLUGINSDIR/dialogsEx.dll
-
Size
12KB
-
MD5
26068c948b8529a61286c1f82cd2bac5
-
SHA1
5d07f7eb34f498eb57933fa3e92c53e38e96fca4
-
SHA256
5ec7c1f4579229592fe7ec1e971d1fa1eb70a7fcd769c712b34e49e1c9f239d8
-
SHA512
5390c888dc27070d91eb05fef00fd85c364b3413cd1015739c954a8238b097d0af73ce63743aa4bd51a775b737acc857e83e06bea3396942a101cca5edc94acc
-
SSDEEP
192:86Kxv2/dKOWQqklwbJzN+eVP/nVV0lzPNDMZLTf:89xv2/d+klwt7nVazM1
Score3/10 -