Overview
overview
7Static
static
708820767eb...18.exe
windows7-x64
308820767eb...18.exe
windows10-2004-x64
3$PLUGINSDI...ig.dll
windows7-x64
3$PLUGINSDI...ig.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...el.dll
windows7-x64
7$PLUGINSDI...el.dll
windows10-2004-x64
7$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3SideOh.dll
windows7-x64
6SideOh.dll
windows10-2004-x64
6SideOh.exe
windows7-x64
6SideOh.exe
windows10-2004-x64
6Analysis
-
max time kernel
138s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
24-06-2024 12:28
Behavioral task
behavioral1
Sample
08820767eb8536e55abc1dba54e54e5b_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
08820767eb8536e55abc1dba54e54e5b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/IpConfig.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/IpConfig.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SelfDel.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SelfDel.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
SideOh.dll
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
SideOh.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
SideOh.exe
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
SideOh.exe
Resource
win10v2004-20240226-en
General
-
Target
08820767eb8536e55abc1dba54e54e5b_JaffaCakes118.exe
-
Size
201KB
-
MD5
08820767eb8536e55abc1dba54e54e5b
-
SHA1
3f0be3f5ae2497fb6a58671d75143ca1d3d9eb75
-
SHA256
3fa9219cabed146cda69d57721f2ae558e90b37dbb16b7d683e79449d254c6bb
-
SHA512
b91ba74bb73a62eebd928f7ab912845eb5027791389ed8920b50f2c51f968a8f5f468a0b76bcafd14d10862aa3a6c925458692faa7b4c12ba97f1dea3adf9f7a
-
SSDEEP
6144:M2e342PF175+ZPPfnE2Qyn20U4HEUPPSTSgmT:sHF+ZPPfnEUnuUnMS3T
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\08820767eb8536e55abc1dba54e54e5b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\08820767eb8536e55abc1dba54e54e5b_JaffaCakes118.exe"1⤵PID:3288
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4160,i,11069752405888604640,8928124405695604965,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:81⤵PID:2748