Overview
overview
7Static
static
3182dd59e34...18.exe
windows7-x64
7182dd59e34...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3GotClip.exe
windows7-x64
1GotClip.exe
windows10-2004-x64
1launcher.exe
windows7-x64
1launcher.exe
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
28/06/2024, 00:50
Static task
static1
Behavioral task
behavioral1
Sample
182dd59e342b8bce1b5ed8e29401461a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
182dd59e342b8bce1b5ed8e29401461a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
GotClip.exe
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
GotClip.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
launcher.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
launcher.exe
Resource
win10v2004-20240611-en
General
-
Target
GotClip.exe
-
Size
229KB
-
MD5
4d8aea76be064cc4d7276599b339e00f
-
SHA1
e5c9667f7a48df6af7aca76dedf9581ced975395
-
SHA256
eed352ae07bc2c24a59168cad56ad7f47b4319748b0b9fbe2128e30791f9198a
-
SHA512
0a7cad8c39f227aacfe683df5be4330d10ff7cef8712da142d78fc276f1c5d49c30f890ef7e474e18ee871b3bae53ca341382ec9c651c006da7f13678c0ed600
-
SSDEEP
3072:D4sYuy84bRadbwfzHNqWpo26sXQxpcTiRv+pcTiR+eD+0y794m/pcTiR:D9nI+cIOd6xOTiRv+OTiR7a94QOTiR
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2476 wrote to memory of 2136 2476 GotClip.exe 28 PID 2476 wrote to memory of 2136 2476 GotClip.exe 28 PID 2476 wrote to memory of 2136 2476 GotClip.exe 28 PID 2476 wrote to memory of 2136 2476 GotClip.exe 28