Overview
overview
7Static
static
32aafaf1e6a...18.exe
windows7-x64
72aafaf1e6a...18.exe
windows10-2004-x64
7$PLUGINSDI...am.dll
windows7-x64
3$PLUGINSDI...am.dll
windows10-2004-x64
3$PLUGINSDI...ew.dll
windows7-x64
3$PLUGINSDI...ew.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
1$PLUGINSDI...ns.dll
windows10-2004-x64
1$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
1$PLUGINSDI...LL.dll
windows10-2004-x64
1$PLUGINSDI...te.dll
windows7-x64
1$PLUGINSDI...te.dll
windows10-2004-x64
1$R1/starseeup.exe
windows7-x64
1$R1/starseeup.exe
windows10-2004-x64
1$R1/starzipup.exe
windows7-x64
1$R1/starzipup.exe
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 02:35
Static task
static1
Behavioral task
behavioral1
Sample
2aafaf1e6ae42f0f31942aa24611bdf5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2aafaf1e6ae42f0f31942aa24611bdf5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DLLWaitForKillProgram.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/DLLWebCount_new.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/DLLWebCount_new.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/IEFunctions.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/IEFunctions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/SelfDelete.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
$R1/starseeup.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$R1/starseeup.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
$R1/starzipup.exe
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
$R1/starzipup.exe
Resource
win10v2004-20240704-en
General
-
Target
$R1/starzipup.exe
-
Size
212KB
-
MD5
3ee0baa2f6429860176621869580ffda
-
SHA1
3fcfd9c4db068c916c827a3a8a62917617342b06
-
SHA256
93f5560545d7ff47d9e2a31a1451f4ff3ddcaacd1c98cc655e6e2b0f35031612
-
SHA512
5fb998cb9c9d7e9a2ac1ccb22524da53bcc812e3646ad58ae7791b80fb28ad6efb13227896808edc0315f38ac54081e32fbe77fc0bde2e2dda58a3117335724a
-
SSDEEP
1536:NyQfiSi9f+foSdmzpv09muIhQLUehFXtCPi:NyDSi9fEoScpv09mu6q7hPC
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2336 starzipup.exe 2336 starzipup.exe