Overview
overview
7Static
static
3afc5f9a700...18.exe
windows7-x64
7afc5f9a700...18.exe
windows10-2004-x64
7$PLUGINSDIR/7za.exe
windows7-x64
1$PLUGINSDIR/7za.exe
windows10-2004-x64
1$PLUGINSDI...G].exe
windows7-x64
1$PLUGINSDI...G].exe
windows10-2004-x64
1$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Analysis
-
max time kernel
125s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
15-06-2024 18:26
Static task
static1
Behavioral task
behavioral1
Sample
afc5f9a7002c92fb1e43f9d53eb331b9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
afc5f9a7002c92fb1e43f9d53eb331b9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/7za.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/7za.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/[RANDOM_STRING].exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/[RANDOM_STRING].exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240611-en
General
-
Target
$PLUGINSDIR/[RANDOM_STRING].exe
-
Size
225KB
-
MD5
51e7fc25a21d41eb4aecd396def37833
-
SHA1
bcfe392981c691ee3071ee98a7fb98dc54903175
-
SHA256
ce2dbcc3f203c696b79c67fa23b03f47548a9c8ce5bf912518e4dcde7d83823f
-
SHA512
becfc1965b20f12c3503762f4818b87153722a59bab01b5942151899b077fedfb9a5b0e93e8ad4fbda67d0c501b845eba9680c84c951b0a8ad024407e1b2d2e9
-
SSDEEP
6144:3Lbii5bkgVuN+xSKV7Wkrsf7LshQVtcU+CiDEfYZ+2:3XikbkgaISKV2VtcU+CiUYU2
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\[RANDOM_STRING].exe"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\[RANDOM_STRING].exe"1⤵PID:3276
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3024,i,7977653611488681184,6839495125838449898,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:81⤵PID:3864