Overview
overview
7Static
static
3a7a8bff507...18.exe
windows7-x64
7a7a8bff507...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$TEMP/tap-windows.exe
windows7-x64
7$TEMP/tap-windows.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3bin/devcon.exe
windows7-x64
1bin/devcon.exe
windows10-2004-x64
1driver/tap0901.sys
windows7-x64
1driver/tap0901.sys
windows10-2004-x64
1bin/libeay32.dll
windows7-x64
1bin/libeay32.dll
windows10-2004-x64
1bin/liblzo2-2.dll
windows7-x64
1bin/liblzo2-2.dll
windows10-2004-x64
1bin/libpkc...-1.dll
windows7-x64
3bin/libpkc...-1.dll
windows10-2004-x64
3bin/openssl.exe
windows7-x64
1bin/openssl.exe
windows10-2004-x64
1bin/openvpn-gui.exe
windows7-x64
1bin/openvpn-gui.exe
windows10-2004-x64
1General
-
Target
a7a8bff507d3aa5f382e68cd344e589c_JaffaCakes118
-
Size
1.5MB
-
Sample
240614-cfrgvs1eke
-
MD5
a7a8bff507d3aa5f382e68cd344e589c
-
SHA1
87e22e8b9200d178b00c8d7fc5437fac7b7eb7eb
-
SHA256
33659d416ece94d089ac3aa73302d73f30944b4cd299506b215990b8dfe8a41e
-
SHA512
e556be94a29c5378e6e453bec75bf9422e41572787d2466165259164b2c2baf5e3d301e9b6ea57379f205aa87bec52c986f211b7aae20651d5c844f435a41a7e
-
SSDEEP
24576:tIDAIdEYf1+vXI4lzkrAja9l890udp1h+5UJWI9qPfe3gZrPVZdJb+9tbV/x6o:tjAmI4NkrAjco06p1EUSPfY69N+9tbN
Static task
static1
Behavioral task
behavioral1
Sample
a7a8bff507d3aa5f382e68cd344e589c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a7a8bff507d3aa5f382e68cd344e589c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$TEMP/tap-windows.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$TEMP/tap-windows.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
bin/devcon.exe
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
bin/devcon.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
driver/tap0901.sys
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
driver/tap0901.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
bin/libeay32.dll
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
bin/libeay32.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
bin/liblzo2-2.dll
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
bin/liblzo2-2.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
bin/libpkcs11-helper-1.dll
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
bin/libpkcs11-helper-1.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
bin/openssl.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
bin/openssl.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
bin/openvpn-gui.exe
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
bin/openvpn-gui.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
a7a8bff507d3aa5f382e68cd344e589c_JaffaCakes118
-
Size
1.5MB
-
MD5
a7a8bff507d3aa5f382e68cd344e589c
-
SHA1
87e22e8b9200d178b00c8d7fc5437fac7b7eb7eb
-
SHA256
33659d416ece94d089ac3aa73302d73f30944b4cd299506b215990b8dfe8a41e
-
SHA512
e556be94a29c5378e6e453bec75bf9422e41572787d2466165259164b2c2baf5e3d301e9b6ea57379f205aa87bec52c986f211b7aae20651d5c844f435a41a7e
-
SSDEEP
24576:tIDAIdEYf1+vXI4lzkrAja9l890udp1h+5UJWI9qPfe3gZrPVZdJb+9tbV/x6o:tjAmI4NkrAjco06p1EUSPfY69N+9tbN
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
18KB
-
MD5
adec63bd08a185bffe6fda335d29df87
-
SHA1
23f37d31f3b1c07547ad4fa2747305a04ac09b54
-
SHA256
dbd0068d46077ee1ace4eaafc3312389c29af22d306c5757a1a29a93146604a9
-
SHA512
44bb32fa41b0c2b41d637f15dd2cab84ad6f9dae39febb263923eeee19d1c80d65ba3939ab87d34fbb28af6a6f867c21daab5810d289e309451c67ef6f65a88c
-
SSDEEP
384:LPs/sv/Qji4uGGAjc6GKv3WRg0DXRpLJXCYAkF3cuzFNS:LPdEipAmbhX1cu
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
23KB
-
MD5
125aebb055446fb52aa5956cf99e8a9a
-
SHA1
6b58fd08a8ff2763219cc6b0dcdb875f9970f850
-
SHA256
2e1b11ee20e5061ea86dc6b01e3efc659e887540afcab7317cdfd6a8eff87ec3
-
SHA512
5f85e48bd3ae2fd2be0595b93cbf74674e0281210688dcc73691178b295a702e8d43898afb6e5d8b7e82de98b4ee28194c9838ddf8279cde85f7fe48d34dc8b7
-
SSDEEP
384:7AQ5GjarYFU76ffyEIPb9p206QrHwIl8ToknCLJy4k9KyFkKCKWin/aY+:72XixPbPD6gQikUywWkKx/aY+
Score3/10 -
-
-
Target
$PLUGINSDIR/UserInfo.dll
-
Size
6KB
-
MD5
7f780de67db61a924bebc0cafaded3ad
-
SHA1
3ac359dce08ceff16e4214fe45d83fdc8e3f2e1a
-
SHA256
9931a2f8bb44b92ff26062b99cbb6e41ed1cfad65079dec5d6d9c006223bd121
-
SHA512
8378f04b6f5085e887ed46874414e5681f0ecb6889dbaa25eb78f75112d4be603aef8dec6a2a81857a19978f6ccf07d65d566ff3f0943da809de22599ffdd8f2
-
SSDEEP
48:6qX08pwehWTmk61T+8tH1GNO/icjsgnFp8hKAYKFaLDzzDz/xRe2v1e:GkwehWn6086+sgnchKAYKFafzf60
Score3/10 -
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
8KB
-
MD5
249ae678f0dac4c625c6de6aca53823a
-
SHA1
6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201
-
SHA256
7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce
-
SHA512
66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7
-
SSDEEP
192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR
Score3/10 -
-
-
Target
$TEMP/tap-windows.exe
-
Size
227KB
-
MD5
3f314ac56b51b7889d2592169934a47f
-
SHA1
dc2ddcbd86be5cad3e5faa8d80642b1e3cb3c4a7
-
SHA256
3ec994b193be5155a17ec2d7d36274b64663c017e6dfdbcd8dc046d99388a964
-
SHA512
621bb168c37f1031d0650d35a7573310e64198494bf108717af1da67e9dad683dde287bc8bdbfe2a9b037e305bfde76aae4e0a8e67ed6fec5874cda8041b72ff
-
SSDEEP
3072:rLk395hYXJOypKDKG/nuMJqcGYUVBh0ycoDrHoMACUntGdbTmb2NYeBnuMJqc:rQq+DpuMypBh0yXrHoZtGd/mCNDtuM
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
14KB
-
MD5
325b008aec81e5aaa57096f05d4212b5
-
SHA1
27a2d89747a20305b6518438eff5b9f57f7df5c3
-
SHA256
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
-
SHA512
18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
-
SSDEEP
192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/UserInfo.dll
-
Size
4KB
-
MD5
7579ade7ae1747a31960a228ce02e666
-
SHA1
8ec8571a296737e819dcf86353a43fcf8ec63351
-
SHA256
564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
-
SHA512
a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
Score3/10 -
-
-
Target
bin/devcon.exe
-
Size
80KB
-
MD5
3904d0698962e09da946046020cbcb17
-
SHA1
edae098e7e8452ca6c125cf6362dda3f4d78f0ae
-
SHA256
a51e25acc489948b31b1384e1dc29518d19b421d6bc0ced90587128899275289
-
SHA512
c24ab680981d8d6db042b52b7b5c5e92078df83650cad798874fc09ce8c8a25462e1b69340083f4bcad20d67068668abcfa8097e549cfa5ad4f1ee6a235d6eea
-
SSDEEP
1536:MP2K0pa0WfEYp9Y/XQhpgnbP212YCJpDhiF4O7W:MePOYe4bu1epDh8RW
Score1/10 -
-
-
Target
driver/tap0901.sys
-
Size
35KB
-
MD5
2c1686795b9307265f649249ad11d629
-
SHA1
6e5bea0b56b19e88a409ed583f032ea927ce51ac
-
SHA256
51e4cfa39995b155724cfc9af45b83f674f300907b2a405f003ae09e7c6f6e1a
-
SHA512
85dbff96c6606de82a1bc31a027cb440ddc297f1a9d0dcbcc3fa51a20d1441e1800b4a0084374b2071c300f3716c49697a55fae493fb6f4a2b0cad10e674efd8
-
SSDEEP
768:3IOPCr6ghD8JTbNdDChKCfl4FUFqa0XFC1bRbq0FlCbNSjhFux2Y/:4cCr6gYTbPDoRfi60a0XFC1UPQjhFuxf
Score1/10 -
-
-
Target
bin/libeay32.dll
-
Size
1.4MB
-
MD5
a9cf36dd2d2e8df43ca312455ca615f7
-
SHA1
20b33e7f51f01f4100135b3d6c35cf20a97bac47
-
SHA256
da02dd7167894a575901682a1a6377b745365f42e81b8070a5ee6b1e8b5f6f58
-
SHA512
10f56e6592ceb0b57157524ebd45e5a93534f0f190a5cd35094c98032cb01d08452c7cab17e6d2e408b5cf73b3dc0c53c081ebb42954c5e384a122e4d9d70c42
-
SSDEEP
24576:3KaTX+57PID/ISB5a7rFxPav5AOZpanhS4DpRQzURi0mx/T4Jt71mkp4:3BQtSB4nFxZOXEMzUg0mx/cJV1mkp4
Score1/10 -
-
-
Target
bin/liblzo2-2.dll
-
Size
155KB
-
MD5
d6a5d253b9d221a25d8c5e246e823901
-
SHA1
03ebd28340b858c3145b269c7aec3e1e63a33641
-
SHA256
2d8c5b8b32eaf03f0848cae650f3b96533b861b5d3547f8470e76aa162dae3c6
-
SHA512
f60920661e0384e3e29b9e580f0bbfb6bd17821bef4cda04aa9f5a333d2f773a96377f29c1cf55b26e17680bf3bcd1d3d25910efb2fd0f989485e5f91cd50ae7
-
SSDEEP
3072:CZ7PaJFwq0s0+jTnFyO6clq2OlZRpImweG9k9G919503DnP59Cu3PnPC7Glsu13:nwq0WaclEWWsu13
Score1/10 -
-
-
Target
bin/libpkcs11-helper-1.dll
-
Size
102KB
-
MD5
b9ca2d5962fff8ad8f58d86759bb6933
-
SHA1
f1b5d23bcf2290817f228795e44cc82c0ba90955
-
SHA256
0ff4fb3c39b95f12dbe3a9ce97bd820751321edc0afcc424521a28fea033ac73
-
SHA512
3c12cecdb33f12b38cda688ad71b8df3f257a735792848ae62296bd19268a628efbe998a0ba04420a4c99f8570bc13105da5c924345502977b14fdcb859b1e64
-
SSDEEP
3072:BjZE7WPMer+oB9+UsnUS/5Dxh9QQU7kVTAHluobjrmBbZmkY7:vPMepUnUS/5Dxh9QQU7kVTAHluobjrmq
Score3/10 -
-
-
Target
bin/openssl.exe
-
Size
790KB
-
MD5
ebc63cb1a0c0eecd8052b3b3c3d2b9c8
-
SHA1
8248848dc11a7c098a211bfde66590501da1b360
-
SHA256
2406a6040db85e202f482aac43926743808880371cfe3213e70a7a2b9a712e77
-
SHA512
adb2aabde6e906557ac5755affa29e0d0e4b9711a97791f607af021e8a5f5510283403da5ec0a1d0e98710b0ff9ba8d8e3f49b8fe795d7fbb92cf7e9a34129ec
-
SSDEEP
12288:tpJqJ/PizLFq3PCBwgBxvOnG2C2ug9W6TrkO9BF:tpw1izLFq3KBXBUnGL2r9gwBF
Score1/10 -
-
-
Target
bin/openvpn-gui.exe
-
Size
363KB
-
MD5
c048a4774d7b59e13cbdd59d7e3710ae
-
SHA1
b3ee103be1e68815246efab6b91046b81eb48a4d
-
SHA256
34574be4b68e3c8b99e1b4a5ed03ec23972c35a9141a5d999f36a0ffb65d65b7
-
SHA512
da24d47c68eb753518ee3e1446c3d7ae086475ce94a619ca32a334a09c984d43d1261520453920a3c162ce8cf7a207eedf7ad2dae97ee03505b0f10ebe509f64
-
SSDEEP
3072:5mn+FKXycgwmDaojFFz4aA29XB2y3pDyn8Tt2anuUeVvsMN2z/spzgkhFjp4e0bh:uGHFz4arDXK/vHdNu
Score1/10 -