Overview
overview
8Static
static
8a529dbccd1...18.exe
windows7-x64
7a529dbccd1...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$_4_/SciTE/SciTE.exe
windows7-x64
1$_4_/SciTE/SciTE.exe
windows10-2004-x64
1Au3Check.exe
windows7-x64
1Au3Check.exe
windows10-2004-x64
1Au3Info.exe
windows7-x64
1Au3Info.exe
windows10-2004-x64
1Au3Info_x64.exe
windows7-x64
1Au3Info_x64.exe
windows10-2004-x64
1Aut2Exe/Aut2exe.exe
windows7-x64
1Aut2Exe/Aut2exe.exe
windows10-2004-x64
1Aut2Exe/Au...64.exe
windows7-x64
1Aut2Exe/Au...64.exe
windows10-2004-x64
1Aut2Exe/upx.exe
windows7-x64
7Aut2Exe/upx.exe
windows10-2004-x64
7AutoIt v3 Website.url
windows7-x64
1AutoIt v3 Website.url
windows10-2004-x64
1AutoIt.chm
windows7-x64
1AutoIt.chm
windows10-2004-x64
1AutoIt3.exe
windows7-x64
3AutoIt3.exe
windows10-2004-x64
3AutoIt3Help.exe
windows7-x64
1AutoIt3Help.exe
windows10-2004-x64
1AutoIt3_x64.exe
windows7-x64
3AutoIt3_x64.exe
windows10-2004-x64
3Analysis
- max time kernel
134s - max time network
159s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 10:51
Behavioral task
behavioral1
Sample
a529dbccd18d8a1f452b6eeb660edd48_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a529dbccd18d8a1f452b6eeb660edd48_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$_4_/SciTE/SciTE.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
$_4_/SciTE/SciTE.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
Au3Check.exe
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
Au3Check.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Au3Info.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Au3Info.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
Au3Info_x64.exe
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
Au3Info_x64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Aut2Exe/Aut2exe.exe
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
Aut2Exe/Aut2exe.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Aut2Exe/Aut2exe_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Aut2Exe/Aut2exe_x64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Aut2Exe/upx.exe
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
Aut2Exe/upx.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
AutoIt v3 Website.url
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
AutoIt v3 Website.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
AutoIt.chm
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
AutoIt.chm
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
AutoIt3.exe
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
AutoIt3.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
AutoIt3Help.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
AutoIt3Help.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
AutoIt3_x64.exe
Resource
win7-20240419-en
Behavioral task
behavioral32
Sample
AutoIt3_x64.exe
Resource
win10v2004-20240611-en
General
- Target AutoIt.chm
- Size 6.5MB
- Sample240613-mxsrcsvhre
- SHA256 e493c9efee0aac85f1658f5c21c83a74a0f2cc927266646b6aae1412e0964abd
- MD5 e61c5fbe2475982bec72ce15cba41c28
- SHA1 9930ff5203f25d29f5f7bb17b5871459c76465de
- SHA512 8129ae9636d33540da639c9bb511722cb388af1cb28a327542755971f0599b0b25dc65ed0bc1990058a9f14a972e073679e11b65a61a8ea5dd48a8d38f933f57
- SSDEEP 196608:Yv2POtgZmeT84eJrNC64/ylIofzsCkkrIIv1:YyM7a8lrNWxo7dkkr9
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4596 hh.exe 4596 hh.exe
Processes
-
C:\Windows\hh.exe"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\AutoIt.chm1⤵
- Suspicious use of SetWindowsHookEx
PID:4596
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4472 --field-trial-handle=2280,i,1836084024518340990,18250262151825427757,262144 --variations-seed-version /prefetch:81⤵PID:5560