Overview
overview
7Static
static
31a953973ae...18.exe
windows7-x64
71a953973ae...18.exe
windows10-2004-x64
7$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3Coral.dll
windows7-x64
3Coral.dll
windows10-2004-x64
3Coral.exe
windows7-x64
6Coral.exe
windows10-2004-x64
6CoralApp.dll
windows7-x64
1CoralApp.dll
windows10-2004-x64
3CoralDb.dll
windows7-x64
3CoralDb.dll
windows10-2004-x64
3CoralDownload.dll
windows7-x64
3CoralDownload.dll
windows10-2004-x64
3CoralRender.dll
windows7-x64
1CoralRender.dll
windows10-2004-x64
3CoralTrident.dll
windows7-x64
3CoralTrident.dll
windows10-2004-x64
3CoralUI.dll
windows7-x64
1CoralUI.dll
windows10-2004-x64
3CoralUI2.dll
windows7-x64
3CoralUI2.dll
windows10-2004-x64
3CoralUpdate.dll
windows7-x64
3CoralUpdate.dll
windows10-2004-x64
3Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 08:22
Static task
static1
Behavioral task
behavioral1
Sample
1a953973ae8428f6f44f37c6fdae3d68_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a953973ae8428f6f44f37c6fdae3d68_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Coral.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
Coral.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Coral.exe
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
Coral.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
CoralApp.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
CoralApp.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
CoralDb.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
CoralDb.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
CoralDownload.dll
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
CoralDownload.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
CoralRender.dll
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
CoralRender.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
CoralTrident.dll
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
CoralTrident.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
CoralUI.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
CoralUI.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
CoralUI2.dll
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
CoralUI2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
CoralUpdate.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
CoralUpdate.dll
Resource
win10v2004-20240508-en
General
-
Target
CoralRender.dll
-
Size
137KB
-
MD5
832bf20d1d1ed5c247ed7367508dd428
-
SHA1
9715a09440933d558e208af914ab730e0e4789ef
-
SHA256
e1b1f74f7048c9d4bdba657912b622481271e8ac7519d1ff2ea7b38d68090253
-
SHA512
5550991e2f010585956df506d9c2c6a636afa556c29462e56cbf6c3ad26dcd493dd235f1e26f21529a07fee485d7398e61cb4ae9d78a85a8514d2b93263a0016
-
SSDEEP
3072:hpJqiHpl8l71rgDi8cEBGi5Nkl3fUUJ0oYl0WuZYODtM2tBnRPV:giHn8YBGiu0DSjZYODtMIxV
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2436 wrote to memory of 2400 2436 rundll32.exe 28 PID 2436 wrote to memory of 2400 2436 rundll32.exe 28 PID 2436 wrote to memory of 2400 2436 rundll32.exe 28 PID 2436 wrote to memory of 2400 2436 rundll32.exe 28 PID 2436 wrote to memory of 2400 2436 rundll32.exe 28 PID 2436 wrote to memory of 2400 2436 rundll32.exe 28 PID 2436 wrote to memory of 2400 2436 rundll32.exe 28