Overview
overview
7Static
static
3925238f692...18.exe
windows7-x64
7925238f692...18.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...md.dll
windows7-x64
3$PLUGINSDI...md.dll
windows10-2004-x64
3$PLUGINSDI...mp.exe
windows7-x64
1$PLUGINSDI...mp.exe
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...er.exe
windows7-x64
1$PLUGINSDI...er.exe
windows10-2004-x64
1$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDIR/xml.dll
windows7-x64
3$PLUGINSDIR/xml.dll
windows10-2004-x64
3$RESOURCES...le.dll
windows7-x64
1$RESOURCES...le.dll
windows10-2004-x64
1$RESOURCES...le.dll
windows7-x64
1$RESOURCES...le.dll
windows10-2004-x64
1$RESOURCES...60.dll
windows7-x64
1$RESOURCES...60.dll
windows10-2004-x64
1$RESOURCES...es.dll
windows7-x64
1$RESOURCES...es.dll
windows10-2004-x64
1$WINDIR/Xb...st.exe
windows7-x64
7$WINDIR/Xb...st.exe
windows10-2004-x64
7$PLUGINSDI...md.dll
windows7-x64
3$PLUGINSDI...md.dll
windows10-2004-x64
3Analysis
- max time kernel
117s - max time network
119s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 15:46
Static task
static1
Behavioral task
behavioral1
Sample
925238f6927b2a418df5b69cd03e6e03_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
925238f6927b2a418df5b69cd03e6e03_JaffaCakes118.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/JpgToBmp.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/JpgToBmp.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UXTheme Patcher.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UXTheme Patcher.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral14
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
$PLUGINSDIR/xml.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral20
Sample
$PLUGINSDIR/xml.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
$RESOURCES/Themes/xbox360/Shell/NormalColor/en-US/shellstyle.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
$RESOURCES/Themes/xbox360/Shell/NormalColor/en-US/shellstyle.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
$RESOURCES/Themes/xbox360/Shell/NormalColor/shellstyle.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral24
Sample
$RESOURCES/Themes/xbox360/Shell/NormalColor/shellstyle.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
$RESOURCES/Themes/xbox360/Xbox360.dll
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral26
Sample
$RESOURCES/Themes/xbox360/Xbox360.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
$RESOURCES/Themes/xbox360/en-US/xbox360.msstyles.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral28
Sample
$RESOURCES/Themes/xbox360/en-US/xbox360.msstyles.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
$WINDIR/Xbox Skin Pack/$WINDIR/Xbox Skin Pack/uninst.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral30
Sample
$WINDIR/Xbox Skin Pack/$WINDIR/Xbox Skin Pack/uninst.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral32
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
General
- Target $PLUGINSDIR/Banner.dll
- Size 4KB
- Sample240603-s7tpasbc8s
- SHA256 ab80cf45070d936f0745f5e39b22e6e07ba90aa179b5ec4469ef6e2cb1b9ef6b
- MD5 0116a50101c4107a138a588d1e46fca5
- SHA1 b781dce23e828cf2b97306661c7dad250a6aaf77
- SHA512 55de6aeaad05b01a25828553d3ea9f1b32a8b0c35c42dc6106bed244320e3421ec6a6f5359b15f9d18dd1e9692ca5572b2736d9d48cceb07b9443601d00a5988
- MD5 SHA1 SHA512
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2992 wrote to memory of 3008 2992 rundll32.exe 28 PID 2992 wrote to memory of 3008 2992 rundll32.exe 28 PID 2992 wrote to memory of 3008 2992 rundll32.exe 28 PID 2992 wrote to memory of 3008 2992 rundll32.exe 28 PID 2992 wrote to memory of 3008 2992 rundll32.exe 28 PID 2992 wrote to memory of 3008 2992 rundll32.exe 28 PID 2992 wrote to memory of 3008 2992 rundll32.exe 28