Overview
overview
8Static
static
8a529dbccd1...18.exe
windows7-x64
7a529dbccd1...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$_4_/SciTE/SciTE.exe
windows7-x64
1$_4_/SciTE/SciTE.exe
windows10-2004-x64
1Au3Check.exe
windows7-x64
1Au3Check.exe
windows10-2004-x64
1Au3Info.exe
windows7-x64
1Au3Info.exe
windows10-2004-x64
1Au3Info_x64.exe
windows7-x64
1Au3Info_x64.exe
windows10-2004-x64
1Aut2Exe/Aut2exe.exe
windows7-x64
1Aut2Exe/Aut2exe.exe
windows10-2004-x64
1Aut2Exe/Au...64.exe
windows7-x64
1Aut2Exe/Au...64.exe
windows10-2004-x64
1Aut2Exe/upx.exe
windows7-x64
7Aut2Exe/upx.exe
windows10-2004-x64
7AutoIt v3 Website.url
windows7-x64
1AutoIt v3 Website.url
windows10-2004-x64
1AutoIt.chm
windows7-x64
1AutoIt.chm
windows10-2004-x64
1AutoIt3.exe
windows7-x64
3AutoIt3.exe
windows10-2004-x64
3AutoIt3Help.exe
windows7-x64
1AutoIt3Help.exe
windows10-2004-x64
1AutoIt3_x64.exe
windows7-x64
3AutoIt3_x64.exe
windows10-2004-x64
3General
- Target a529dbccd18d8a1f452b6eeb660edd48_JaffaCakes118
- Size 11.5MB
- Sample240613-mxsrcsvhre
- SHA256 58c7a7e2f42c5ffa28e2fc8338af55bb8f94981ac846f40dbf35f38eeb27f5c6
- MD5 a529dbccd18d8a1f452b6eeb660edd48
- SHA1 3d94aa894a53d6010e5e8abe21bf695e1d6735f3
- SHA512 3cdc79a2c31064e9260c7eb5dab807ecba91911fa56f963a093bcd73b6441f3ca89fe3e5121dd49f19c50f0bfd14f298fc850fc37e1c3e01dc7deccb3505e17b
- SSDEEP 196608:yNsIPsjvhbN/pFiFpvtrPLzowncu5l1dNKDc3RyZymgksOWJc:obPsjvVMFpvRzowp5l1uDVLp
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
a529dbccd18d8a1f452b6eeb660edd48_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a529dbccd18d8a1f452b6eeb660edd48_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$_4_/SciTE/SciTE.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
$_4_/SciTE/SciTE.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
Au3Check.exe
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
Au3Check.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Au3Info.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Au3Info.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
Au3Info_x64.exe
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
Au3Info_x64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Aut2Exe/Aut2exe.exe
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
Aut2Exe/Aut2exe.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Aut2Exe/Aut2exe_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Aut2Exe/Aut2exe_x64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Aut2Exe/upx.exe
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
Aut2Exe/upx.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
AutoIt v3 Website.url
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
AutoIt v3 Website.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
AutoIt.chm
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
AutoIt.chm
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
AutoIt3.exe
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
AutoIt3.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
AutoIt3Help.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
AutoIt3Help.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
AutoIt3_x64.exe
Resource
win7-20240419-en
Behavioral task
behavioral32
Sample
AutoIt3_x64.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
- Target a529dbccd18d8a1f452b6eeb660edd48_JaffaCakes118
- Size 11.5MB
- SHA256 58c7a7e2f42c5ffa28e2fc8338af55bb8f94981ac846f40dbf35f38eeb27f5c6
- MD5 a529dbccd18d8a1f452b6eeb660edd48
- SHA1 3d94aa894a53d6010e5e8abe21bf695e1d6735f3
- SHA512 3cdc79a2c31064e9260c7eb5dab807ecba91911fa56f963a093bcd73b6441f3ca89fe3e5121dd49f19c50f0bfd14f298fc850fc37e1c3e01dc7deccb3505e17b
- SSDEEP 196608:yNsIPsjvhbN/pFiFpvtrPLzowncu5l1dNKDc3RyZymgksOWJc:obPsjvVMFpvRzowp5l1uDVLp
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- MD5 SHA1 SHA512
Score3/10 -
- Target $_4_/SciTE/SciTE.exe
- Size 1.2MB
- SHA256 9985bfeb30a057773c13b5aed9d37e073083a5f9d299548b0f89dfb15bf2a0ff
- MD5 a02000226ac0169d0086c890c40f59de
- SHA1 43a7fbd0660b9cb844185014be187a35efca3d9f
- SHA512 c86d4dad8242289b0d79327ad90f1c99d1011c11ba6a1e8f04181978df85b4e2913be2a2cfb921ef8ed34da6ae3c0e89e3e83550be11a5d3739adcb20879dafd
- SSDEEP 24576:875KiUKHpTypewTelai7YGKfoTvOMaTvfTXfBxrKR95E/jKQvVj4YpdjYY0td7k9:yaKJTypekiPKQTvOMaTfjBxrKR
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Au3Check.exe
- Size 191KB
- SHA256 2e14df6dff86fd2f9f35295f23cf4ca495169e73e9f5208e468c656b5bbb660d
- MD5 1be6553c05c4e54f212b450d738b898a
- SHA1 f1e9f1c45c54caac988427a8c58c317a98878073
- SHA512 a1d7d1328fbe08325bbc4bc6cff49d8fd8e09b02ac2396cadbeafb60f103c1569257d30e8638a87e47619e3b1fc3dbf92ba5cff37a3b1f0b3a59d81f243bf819
- SSDEEP 3072:57rBRAAV8Y/OiDz70CpzjBiXCPVdwQWEtP+N+WYPwmhDx5T4XTbCAqtTG3a:RrvAU/H0CxjBxFPQ8tjRAA
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Au3Info.exe
- Size 203KB
- SHA256 4a0eea1ab489c4799beb208c56fe88522d02c7db9416b3b91d4d6fb1e8bfe19e
- MD5 48859f39b5b066a2003cfcb6a4932d1f
- SHA1 ed27bcdf33806734fb93396750c0e1eed3f74a65
- SHA512 667748a8149ee422b780f4ee96b113ed83aa7861c78ac475d8d139ea84df60b7fb8e17567b4288e6f37fda33a65963f3610de98c5942909c82bbda7f2e740a58
- SSDEEP 3072:vR5StHeHv5cyOSyW6Ar0V06pijcE9pzjIqnnTJkQ3+FnkjKy6/6Zra:55tCXNpY7fLTj3+Fnk2yO6Zra
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Au3Info_x64.exe
- Size 222KB
- SHA256 ccd56a1ad9b1626b229eee1817ceac9cd80eab4d8f1b952356b342881ed209c1
- MD5 a8a8ca7f4276de44f2da2c00ffdf6806
- SHA1 a304edc7eb11e5b297f99724b2bea9116c04811f
- SHA512 341fd2e74d696d03ce12ab54a327ff01c5e06c3b0b06569870e6ea699682cb3ad0f2277269b1ae540b59db2ceb804176f0515cdd380d0f04a3677dac0d83dc95
- SSDEEP 6144:dKanTOfZdmFDNSRaOgpY7fLTj3+Fnk2yO:YXCDmff2j
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Aut2Exe/Aut2exe.exe
- Size 1.3MB
- SHA256 0b0e9152e0d9f705d3f5d49d7959749bf36456691da791d24ef2ac3394a5985a
- MD5 9a20956bec47d5f2c63cafd5396351de
- SHA1 f17075e828118b0633d2c4ec5c9880a6507211d5
- SHA512 09ee68b7489e5d7ac3060856c00f47bdb4d4b6b722b20e5091f6f58549ce738c6bd4129a384572378ce3bc37feca733daa330db7cadf46f3458750667cb03f05
- SSDEEP 24576:3BA7Bo4RBM1l5XIdwr+GTC385qXK79KbjWY7dGG22KTrznkQt12G:O7uOUl54dLG2385Z9KOSGG22KLnkc9
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Aut2Exe/Aut2exe_x64.exe
- Size 1.4MB
- SHA256 1f5aa0f84a2b6be69462225d2367fb6c8ebfce1097251c5442a54a11b5849f36
- MD5 1ea13308ae000eeaaeca5de23e657deb
- SHA1 5977b54994f1ea637b0f3c417c932708a2fa770d
- SHA512 7d8b0807d5759e0ca51f2cb73812a5b9631c4808bc1e4e68a429f124406c3a20700d7e3b4048a69d3b3139cc7032cdc89282824a78d8cfe922446ff2ec1d4849
- SSDEEP 24576:MaHbXed15MFSBo4RBM1l5XIdwr+GTC385qXK79KbjWY7dGG22KTrznkQt126:f725OSuOUl54dLG2385Z9KOSGG22KLnN
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Aut2Exe/upx.exe
- Size 298KB
- SHA256 0c3dc789d0a46493bd097526b920d913d930d96b1052cb331eec3ac560c89996
- MD5 e9eacbb7ab4b3f66019e0a2f13a1dba9
- SHA1 ae30894b29e52bf04afc4a54795d438fb910acff
- SHA512 925445d20c93c65a282fc59f773551d824bff1f8e2623fd8ea0c587831a9550c400f121defb3d82c8f0401903fa69e3154dc98e29688d02af1d5d01247914a06
- SSDEEP 6144:vZCWmlys014OqpXDXz7yIrozs0WuNd3ojusBdgnNW6r4F53ttuGENGFdVCLEYnPQ:hCWV7q9zGImAjJdcH4j3ttzFdVCLNSf5
- MD5 SHA1 SHA512 SSDEEP
Score7/10 -
- Target AutoIt v3 Website.url
- Size 204B
- SHA256 a8697c79934ff08407412d2c0c0492217709841638f1fd7fc6d8a68c105eed0b
- MD5 7b6871ad1de81e0201386eeb8a71498f
- SHA1 e9e95aa3569a6a970a4540332065c1a490f97fb2
- SHA512 75f79510aa2953e04eebf4d339619c4e8a7a35cde7edc2c2c59b358f33e20b9329ae6e4cb9ee9aa4e34cf4a3c6d2191f88c78d36ebeeefc8487dd22b82dc9bd1
- MD5 SHA1 SHA512
Score1/10 -
- Target AutoIt.chm
- Size 6.5MB
- SHA256 e493c9efee0aac85f1658f5c21c83a74a0f2cc927266646b6aae1412e0964abd
- MD5 e61c5fbe2475982bec72ce15cba41c28
- SHA1 9930ff5203f25d29f5f7bb17b5871459c76465de
- SHA512 8129ae9636d33540da639c9bb511722cb388af1cb28a327542755971f0599b0b25dc65ed0bc1990058a9f14a972e073679e11b65a61a8ea5dd48a8d38f933f57
- SSDEEP 196608:Yv2POtgZmeT84eJrNC64/ylIofzsCkkrIIv1:YyM7a8lrNWxo7dkkr9
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target AutoIt3.exe
- Size 910KB
- SHA256 ec09184ffc4826e7de1d25efe48c23e0a9c9201c8c0065d97bf4cf1ea16205ef
- MD5 79cd14a75d06ba52712e45bea1070fba
- SHA1 e994af953c95685ecd4cc342b6de5952c6acd903
- SHA512 73b736915b68d78d560784dfafdabfd7e46df0029ec720a7a596dd0b3153d8a33fc96f1de602609b5aa8bca63220fc94947dfef11def19ae732e69d3f87865d3
- SSDEEP 24576:4S3Y/Vq9xND7m8kdkpXw10dH4TRKaMP64+t:0/cfDyExw1O4VKaMPrE
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target AutoIt3Help.exe
- Size 89KB
- SHA256 b25d575ebd36301b0e12940f01d53a922148d1471f832aeb327d1e78741d7f31
- MD5 3538e38cc58dad7b6dd23c66bceaaa68
- SHA1 a91a013cb75569a5e14ce517501abc7b7b379788
- SHA512 46ea88cf3716ed7fc8063d006b54e84c2ce43e0c40781fa8524a6e180942f2d018a185ceddd8854eca93a2154bab44c0ba2ffc5da76c8ccb6f871a1fe4dacf89
- SSDEEP 1536:BMUjlpgYkOCHcj1WgsWjcdkLJJodSJqC3N0B/yoLDe0jk:BMUWLw14EJJoIJqC3CJyoDj
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target AutoIt3_x64.exe
- Size 1.0MB
- SHA256 c627bea9a8376664bc72ebd4f736150501a67bc537d4e8dd94e616d5db20c9dc
- MD5 08abd156b7b539dfd70a0ebcc8e42452
- SHA1 1a71540511b1006a4b89e5e96c0a93e49543958f
- SHA512 ce5f3644b9ac9ee3f64c13805b684628301bb5436034f30516eb853aee989a323cd24c4fc2ad9db1f00d19dc20db6675c5d4d15bf3ccc36690ca790c9940996d
- SSDEEP 24576:iWhtX930Ci/AgI5KIL9B4CH01WixafoOP6:jhX3hiYgI5KIL9LB0afTP
- MD5 SHA1 SHA512 SSDEEP
Score3/10