Overview
overview
7Static
static
3074416033f...18.exe
windows7-x64
7074416033f...18.exe
windows10-2004-x64
7$PLUGINSDI...s.html
windows7-x64
1$PLUGINSDI...s.html
windows10-2004-x64
1$PLUGINSDI...w.html
windows7-x64
1$PLUGINSDI...w.html
windows10-2004-x64
1$PLUGINSDI...l.html
windows7-x64
1$PLUGINSDI...l.html
windows10-2004-x64
1$PLUGINSDI...Ex.dll
windows7-x64
3$PLUGINSDI...Ex.dll
windows10-2004-x64
3$PLUGINSDI...l.html
windows7-x64
1$PLUGINSDI...l.html
windows10-2004-x64
1$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
1$PLUGINSDI...ss.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDIR/nswg.dll
windows7-x64
3$PLUGINSDIR/nswg.dll
windows10-2004-x64
3$PLUGINSDI...e.html
windows7-x64
1$PLUGINSDI...e.html
windows10-2004-x64
1$PLUGINSDI...w.html
windows7-x64
1$PLUGINSDI...w.html
windows10-2004-x64
1$PLUGINSDIR/xvid.exe
windows7-x64
7$PLUGINSDIR/xvid.exe
windows10-2004-x64
7General
-
Target
074416033f8f4a0c786a6c299af897ec_JaffaCakes118
-
Size
888KB
-
Sample
240624-jmdmxa1fqd
-
MD5
074416033f8f4a0c786a6c299af897ec
-
SHA1
fc42ff98b6778d54cfea6245c11da68bbaddcc94
-
SHA256
f41d345b0bbf9e7cad979950a8700204ad2d5241953771f54b3df1d67aedbe94
-
SHA512
19294cb407a5b71422a762df5cdfff555b6a5ccba7cd6c206a1a1ba74fe172755f3a4b4faad94870eb76a8a436b6bffe78f096487a134893f1a76598f2f3b7c8
-
SSDEEP
24576:gRQ+0rX+aA64bVx73Pnq3Stj28fxGK5lGGPc:8x01A64px/gUGr
Static task
static1
Behavioral task
behavioral1
Sample
074416033f8f4a0c786a6c299af897ec_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
074416033f8f4a0c786a6c299af897ec_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Components.html
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Components.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Components_noadw.html
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Components_noadw.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/Final.html
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/Final.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InetLoadEx.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InetLoadEx.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/Install.html
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/Install.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/Progress.dll
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/Progress.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/blowfish.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/blowfish.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nswg.dll
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nswg.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/welcomepage.html
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/welcomepage.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/welcomepage_noadw.html
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/welcomepage_noadw.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/xvid.exe
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/xvid.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
074416033f8f4a0c786a6c299af897ec_JaffaCakes118
-
Size
888KB
-
MD5
074416033f8f4a0c786a6c299af897ec
-
SHA1
fc42ff98b6778d54cfea6245c11da68bbaddcc94
-
SHA256
f41d345b0bbf9e7cad979950a8700204ad2d5241953771f54b3df1d67aedbe94
-
SHA512
19294cb407a5b71422a762df5cdfff555b6a5ccba7cd6c206a1a1ba74fe172755f3a4b4faad94870eb76a8a436b6bffe78f096487a134893f1a76598f2f3b7c8
-
SSDEEP
24576:gRQ+0rX+aA64bVx73Pnq3Stj28fxGK5lGGPc:8x01A64px/gUGr
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/Components.html
-
Size
77KB
-
MD5
22fb1ee0f3b8196344be5f2e27767a6b
-
SHA1
4fd3d2c0985af695b8c157444e584b476044e0b9
-
SHA256
6140c4afa5f9da8cf684a07266934fa7f705502a2efb2b19ba2e38240981aabf
-
SHA512
b64e5968053dc5b5afe4405c92c88eeb2b0d997e17161c77746f60929bd974a141e5d2313d003a9bebe723c34a5e1407c896b00de1bc0c4edc99c33ebf24d922
-
SSDEEP
768:S8AKyG3KGNMZpqVuSxqsdQ7VDfhUr77Sdk61acQR+jEfT8bwMcorAWbO6NzHkZKg:SoMy4WAhhUbSm61aR+5w6XK6RY
Score1/10 -
-
-
Target
$PLUGINSDIR/Components_noadw.html
-
Size
47KB
-
MD5
e2c4cbdc8e7c188cc5536b2ff1111f15
-
SHA1
16afdd395e8a36078e76705ec062f0a2854a0bfc
-
SHA256
6d59e989fb3daa77553ea676f2797b89efbf06423ee8c1c35039129544bb8533
-
SHA512
3d9cc7d7408522ee670555f84f7d2a4d260f1871e2b6345aef8a12b20d38756c3f9deab7c4adbd3813bb8f608fba1573e2926fb85d796989553a20d18045454a
-
SSDEEP
768:S8AKyG3KGNMSFacQR+jEfT8bwMcorAWbO6NzHkZKR920s:SoMoaR+5w6XK6RQ
Score1/10 -
-
-
Target
$PLUGINSDIR/Final.html
-
Size
2KB
-
MD5
20622cde5d463f692052753d96b47ead
-
SHA1
03c103c158d0ff18561c11545a9a9ac4f9c3a1b7
-
SHA256
2217f8bf3db14b7d9038fea9f835c00fc0cf70bb4b92b5658fcec9bb5e6a5471
-
SHA512
8871514e23d2a61274066c6334303e185843e6b4427379a54b6dbcd3108b6bc0f947e120ccbe97e34a4b30679f827d75519b233a2ff0128f19ce01f120fdd1b4
Score1/10 -
-
-
Target
$PLUGINSDIR/InetLoadEx.dll
-
Size
55KB
-
MD5
9fae574b1004bb0650eebba3d8040c59
-
SHA1
541583ec14af05915b8efefe520edd4f25914c9a
-
SHA256
73f4a1529acf2ea56d4db9ed8134bed0498cea38903105f7c2af8cc7d11b8db3
-
SHA512
ab25c429301f2d8a2da6b7c2a222c4028ad8e393c67dde83606762a8ba49c6c49460538624a799969dd0b3c810623d7e471c65a390e8661228a621580d7d54c7
-
SSDEEP
768:WFKaQrcF+ntygjX/+qEg469TRphsguCtPQpcQaa5jZ19K:WIaQrs0kgjx9TRsg1ox5H
Score3/10 -
-
-
Target
$PLUGINSDIR/Install.html
-
Size
3KB
-
MD5
a1b28fa4e489af88bf2c1d7f51e5dc56
-
SHA1
6783d910ab7a92a0296ec06dd25189ab2f453984
-
SHA256
53ab0c8f0cb3257a169015bf8c76fc01a79cd6e2d6f81a196d55eb5c53546ce5
-
SHA512
315de2364ddd4cee4f35261711eecf3f0f2edb7d8fccb94ec2ea16d3068335840a1f8d12e072f9fad156dfabfc5c6f0914327eaaf2f5baee12ec32cfd427ca1b
Score1/10 -
-
-
Target
$PLUGINSDIR/Processes.dll
-
Size
35KB
-
MD5
2cfba79d485cf441c646dd40d82490fc
-
SHA1
83e51ac1115a50986ed456bd18729653018b9619
-
SHA256
86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
-
SHA512
cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
-
SSDEEP
768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score3/10 -
-
-
Target
$PLUGINSDIR/Progress.dll
-
Size
80KB
-
MD5
15e01578481287bbcf32d2217f1b5246
-
SHA1
67a7d05bb2f8b33980867d3352280fa0cd0b4e9f
-
SHA256
61d8f9eba68cc6e2a83ec6d1689b2aa45e06bc32e13cdfcec8b593a14bc8bf70
-
SHA512
9a83832faf20eaef5043f69d468bfe032d790274df25bae73bce4f7830ac83587d7e23dba531bff04951cbed67399386d9ea4337002a99d8cf61de3f8e33b674
-
SSDEEP
768:WCFSITRx/imU5IBAczjPj+NbHHFJUzWwrhABjknWgiLLhfv09jaYhdb5P8mDnbK:+8xzUKBZo0zWWhskjiLwR/5P3b
Score1/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/blowfish.dll
-
Size
60KB
-
MD5
926e4475c00fb5254c32c876921b77d0
-
SHA1
8a55bc8b6e49021a4abbd441783c41d5e019798b
-
SHA256
d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
-
SHA512
53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
-
SSDEEP
768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score3/10 -
-
-
Target
$PLUGINSDIR/nswg.dll
-
Size
182KB
-
MD5
4f2b563f712670211d0e932e43b6e277
-
SHA1
53014306f362c90af7f58ad546237e6310e58fd3
-
SHA256
9319a8a37139cbc5ac27e9f4c4583d615929a9ea681f5212a5f7bad07fcdbdff
-
SHA512
414839a7e4b4d07d4f9c0b10ec708d12547b6866b9567383c0784abb77631a1b60e24a4d450980f8f6c97249b319150062566e12d44bd35b476f9f06aec66652
-
SSDEEP
3072:EjcNKEYgmbSZZWxRw+LvCUDk7rkOFyCUQ9C4jO1wMPCxb5rw06w:JNMOWgmDk8Og9Q9C4jzMPCxhw1w
Score3/10 -
-
-
Target
$PLUGINSDIR/welcomepage.html
-
Size
5KB
-
MD5
0fc57dc1e29c327cef6ca0430faeda53
-
SHA1
f855f2a3ce289dce8bbc8eb827876ce68ae55a19
-
SHA256
d91176005c6ee2179f2d3854e31c6e96529443f3cf24caae954aaf65da1b172f
-
SHA512
725878fcd19bf886c53987f014582400541b476aa7e3a2db1d3de811d4c245cd434ea9725ef63a3e3a24f83b06b98c035ee21a5ac5170888675e3199f72b1a6b
-
SSDEEP
96:SI32bJiWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1DuspvNN35yN64WVAPt:SI0iWEM6Sf75ugffDtIDHEBDzwfF//4V
Score1/10 -
-
-
Target
$PLUGINSDIR/welcomepage_noadw.html
-
Size
5KB
-
MD5
ead9aa05537bfb602bf7cf3243ef4e59
-
SHA1
39f7f7662fc3ef31de18ff03f55d37bcebbbcdcc
-
SHA256
0ede226eca2c85b1aad5b0cfbd30640266ad1e5d1f3f9df18b5250d4015b4cbc
-
SHA512
c0dec139b53abec09fd4cf72b35e37cd911fb929b4dbfb0e65de980efa7775365afad364182c39d41a53bea3d761335d4c3fe9a39d5fdbcd75b9cc51e0027f5f
-
SSDEEP
96:SI32bJbWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1DuspvBNy7Pt:SI0bWEM6Sf75ugffDtIDHEBDzwfF//4H
Score1/10 -
-
-
Target
$PLUGINSDIR/xvid.exe
-
Size
637KB
-
MD5
cfda0738d62a6ce3b605551e311b3c37
-
SHA1
435203e7f713c4484ca4f50f43e847f3dc118962
-
SHA256
a7e72dc1ece52648fae949dd9e25785a611cf6c25512ccd5d0f9dba99456cc50
-
SHA512
3fe7e79004dd24138e294d611d7c301e0686b0636811ae91005a19272c9d30b23a45abe7015967994794b260a2305ad99a0c3a86cb39fb90ecb87e565a78b226
-
SSDEEP
12288:smz39dIoR2bbiwFHDZeUJiFA+KXCJaVkjR6h3Q+sZli4pZd:sI39dhcFtZHiJ8CJaGja/8Z
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-