Overview
overview
7Static
static
307a3273b99...18.exe
windows7-x64
707a3273b99...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...te.dll
windows7-x64
1$PLUGINSDI...te.dll
windows10-2004-x64
1EBcds.exe
windows7-x64
1EBcds.exe
windows10-2004-x64
1EBcdssvc.exe
windows7-x64
5EBcdssvc.exe
windows10-2004-x64
1uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-06-2024 09:12
Static task
static1
Behavioral task
behavioral1
Sample
07a3273b9918b7ecbd2a22b3a8e61bc1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07a3273b9918b7ecbd2a22b3a8e61bc1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
EBcds.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
EBcds.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
EBcdssvc.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
EBcdssvc.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
uninstall.exe
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
uninstall.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240226-en
General
-
Target
EBcds.exe
-
Size
220KB
-
MD5
f5309c8b31a83bcbcb340cf0b951c016
-
SHA1
323a5eba82629c6734bda2f91469ac51d8c31c99
-
SHA256
321dec38ad670d6440467cc1c851d4e7a8ad16e3ba43a2d8e427922dfd177bb7
-
SHA512
f986323b9b21fc4e4a0d379c1eae0328d92fca82f3de8a425bee1361b0856c8e03ceafe2c863812e432e004da4566215b79b9f9aba38896fe2c2d1ab9c1f7a1b
-
SSDEEP
768:9q8N6lf3Zlzs9Mn6b2AtBw5bcm7sVd4d88x4vUO0BvaIBCfBENKOCG:c8U5HsgPYV8Xx4MbBCIBCfB/OCG
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2104 EBcds.exe 2104 EBcds.exe