Overview
overview
10Static
static
3904fd496b0...18.exe
windows7-x64
10904fd496b0...18.exe
windows10-2004-x64
10$APPDATA/2...60.dll
windows7-x64
1$APPDATA/2...60.dll
windows10-2004-x64
1$APPDATA/2...pd.dll
windows7-x64
1$APPDATA/2...pd.dll
windows10-2004-x64
1$APPDATA/e...60.dll
windows7-x64
1$APPDATA/e...60.dll
windows10-2004-x64
1$APPDATA/e...PS.dll
windows7-x64
1$APPDATA/e...PS.dll
windows10-2004-x64
1$APPDATA/e...60.dll
windows7-x64
1$APPDATA/e...60.dll
windows10-2004-x64
1$APPDATA/e...ap.dll
windows7-x64
1$APPDATA/e...ap.dll
windows10-2004-x64
1$APPDATA/e...nv.exe
windows7-x64
$APPDATA/e...nv.exe
windows10-2004-x64
$APPDATA/e...en.exe
windows7-x64
$APPDATA/e...en.exe
windows10-2004-x64
$APPDATA/e...de.dll
windows7-x64
1$APPDATA/e...de.dll
windows10-2004-x64
1$APPDATA/e...ui.dll
windows7-x64
1$APPDATA/e...ui.dll
windows10-2004-x64
1$APPDATA/e...ui.dll
windows7-x64
1$APPDATA/e...ui.dll
windows10-2004-x64
1$APPDATA/t...DC.dll
windows7-x64
1$APPDATA/t...DC.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$TEMP/Cons...ry.dll
windows7-x64
1$TEMP/Cons...ry.dll
windows10-2004-x64
3Analysis
-
max time kernel
132s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
03-06-2024 02:52
Static task
static1
Behavioral task
behavioral1
Sample
904fd496b076d10ab4fc547559b5d0b4_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
904fd496b076d10ab4fc547559b5d0b4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$APPDATA/25/66.opends60.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$APPDATA/25/66.opends60.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$APPDATA/25/vcompd.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$APPDATA/25/vcompd.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
$APPDATA/emergency/diffs/1.opends60.dll
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
$APPDATA/emergency/diffs/1.opends60.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$APPDATA/emergency/diffs/3.COMServerPS.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
$APPDATA/emergency/diffs/3.COMServerPS.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$APPDATA/emergency/diffs/5.opends60.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$APPDATA/emergency/diffs/5.opends60.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$APPDATA/emergency/diffs/ActiveSyncBootstrap.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
$APPDATA/emergency/diffs/ActiveSyncBootstrap.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$APPDATA/emergency/diffs/devenv.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$APPDATA/emergency/diffs/devenv.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
$APPDATA/emergency/diffs/guidgen.exe
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
$APPDATA/emergency/diffs/guidgen.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
$APPDATA/emergency/diffs/metade.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$APPDATA/emergency/diffs/metade.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
$APPDATA/emergency/diffs/msdnmui.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$APPDATA/emergency/diffs/msdnmui.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
$APPDATA/emergency/diffs/vcdeployui.dll
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
$APPDATA/emergency/diffs/vcdeployui.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
$APPDATA/toplist/mode/wbemDC.dll
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
$APPDATA/toplist/mode/wbemDC.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
$TEMP/Conservatory.dll
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
$TEMP/Conservatory.dll
Resource
win10v2004-20240226-en
General
-
Target
$APPDATA/emergency/diffs/5.opends60.dll
-
Size
50B
-
MD5
66fed1f516433d0c1fdef577a5405339
-
SHA1
435fdf52257dc975db8b676828a147fd04f94b95
-
SHA256
af70af914b3ac7d5dc4023934ebcfc189242f8e41c764cfcfae5ade6be3af993
-
SHA512
597ef5dec02ff8c0a47eaf2e78ba37c76487b44864aad7baee0019c981d63d37d9aa8d2cec34dd58bade9a572cf1d40e18212faffacb295c86fa232b83aaf3f7
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$APPDATA\emergency\diffs\5.opends60.dll,#11⤵PID:2908
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4120,i,13035806169561352434,1332896185314862791,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:81⤵PID:3688