Overview
overview
7Static
static
3035a63c0c2...18.exe
windows7-x64
7035a63c0c2...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3FlvPlayer.exe
windows7-x64
1FlvPlayer.exe
windows10-2004-x64
1apps/ffmpeg.exe
windows7-x64
1apps/ffmpeg.exe
windows10-2004-x64
1help_Web F...er.chm
windows7-x64
1help_Web F...er.chm
windows10-2004-x64
1player/flvplayer.html
windows7-x64
1player/flvplayer.html
windows10-2004-x64
1player/flv...w.html
windows7-x64
1player/flv...w.html
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
23-06-2024 22:48
Static task
static1
Behavioral task
behavioral1
Sample
035a63c0c261105e96d936c6404fa057_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
035a63c0c261105e96d936c6404fa057_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
FlvPlayer.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
FlvPlayer.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
apps/ffmpeg.exe
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
apps/ffmpeg.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
help_Web FLV Player.chm
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
help_Web FLV Player.chm
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
player/flvplayer.html
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
player/flvplayer.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
player/flvpreview.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
player/flvpreview.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
uninst.exe
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
uninst.exe
Resource
win10v2004-20240508-en
General
-
Target
FlvPlayer.exe
-
Size
968KB
-
MD5
d2c022894a8c0d589da39b8f0570f5e6
-
SHA1
958f99c02ae903ee86ec8c68c31c0f184b591b47
-
SHA256
3156dc30acab2a6f626d9267e5809cfa28bd7050986f93e14abcae893ac1438e
-
SHA512
f9820d987c2ea6cfcd668d79f9d7a5b5d21fadce5baa590f5df8c4af91713310fa71e3b08f4d2d941afecff075e2f6293855c6d50ecb25b6f0751b8f9f3ee7db
-
SSDEEP
12288:Gwb+YDy87N9ANwKlWrWG2fKaMkwuNxNtIb3cgHQIi+1gfhN0d0MwJS1SSDSSPmzo:Gw/yONEIimS7m
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2436 FlvPlayer.exe 2436 FlvPlayer.exe 2436 FlvPlayer.exe