Overview
overview
7Static
static
3a5d20f25b5...18.exe
windows7-x64
7a5d20f25b5...18.exe
windows10-2004-x64
7$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$TEMP/12e3...LR.exe
windows7-x64
7$TEMP/12e3...LR.exe
windows10-2004-x64
7$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/12e3...R0.exe
windows7-x64
7$TEMP/12e3...R0.exe
windows10-2004-x64
7$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/12e3...R1.exe
windows7-x64
7$TEMP/12e3...R1.exe
windows10-2004-x64
7$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/12e3...R2.exe
windows7-x64
7$TEMP/12e3...R2.exe
windows10-2004-x64
7$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/12e3...UB.exe
windows7-x64
7$TEMP/12e3...UB.exe
windows10-2004-x64
7$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/12e3...er.exe
windows7-x64
1$TEMP/12e3...er.exe
windows10-2004-x64
1Analysis
-
max time kernel
51s -
max time network
55s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13-06-2024 13:36
Static task
static1
Behavioral task
behavioral1
Sample
a5d20f25b5edc1485e6159aeb85cd31f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a5d20f25b5edc1485e6159aeb85cd31f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderDDLR.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderDDLR.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER0.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER0.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER1.exe
Resource
win7-20240419-en
Behavioral task
behavioral20
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER1.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER2.exe
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderOFFER2.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderSTUB.exe
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/downloaderSTUB.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/preinstaller.exe
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/preinstaller.exe
Resource
win10v2004-20240508-en
General
-
Target
$TEMP/12e3c33540e3950d9d7ec996be5d13ee/preinstaller.exe
-
Size
241KB
-
MD5
9d8fe8bcc4c493b2fd1da8d2b07ba57c
-
SHA1
aa9366eb9210c8a5398b5e55921c92ce8970df5b
-
SHA256
f33b7419880c7c90c999970e4c21febaaf6d39fdb02f9d9deafa8f8d97f3b3eb
-
SHA512
3fd58a0d7c870e8b07eb17f8f088d505ad98c7101733972f486a2946d18babfe0e4866ae28a16fe2481e006c26cbdf2d3eb1a2dd71bb44c084bbf14fea475216
-
SSDEEP
6144:gLZpiirZUwURUebtBGVBpBwXVUTL7E97IkXQxBRUoz0iYvF:4NYEVjBwXVwM9vylz3YvF
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4360-0-0x0000000000400000-0x0000000000446000-memory.dmpFilesize
280KB