Overview
overview
7Static
static
72b9d560c66...18.exe
windows7-x64
72b9d560c66...18.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3Delicious.exe
windows7-x64
7Delicious.exe
windows10-2004-x64
7EULA.rtf
windows7-x64
4EULA.rtf
windows10-2004-x64
1Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3aminstall.dll
windows7-x64
1aminstall.dll
windows10-2004-x64
3fmod.dll
windows7-x64
7fmod.dll
windows10-2004-x64
7Analysis
-
max time kernel
148s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 08:16
Behavioral task
behavioral1
Sample
2b9d560c667b0e4ee44fddd12667a6e0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b9d560c667b0e4ee44fddd12667a6e0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Dialer.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Dialer.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
Delicious.exe
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Delicious.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
EULA.rtf
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
EULA.rtf
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
Uninstall.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Uninstall.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
aminstall.dll
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
aminstall.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
fmod.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
fmod.dll
Resource
win10v2004-20240704-en
General
-
Target
Delicious.exe
-
Size
2.0MB
-
MD5
443e190d63d276d836327e49566003fa
-
SHA1
99441cb145f921e90d4e6ef5724f9c63467c45b1
-
SHA256
09153974f755e07eb13e287b0e4d575a1392a26835b690eaf50e440ab8c280cf
-
SHA512
d1ce19fb17cd6cf18fd9803d1c8c4e7613a22f8c1cf7918874a05358e1eee0122d1b523caa00a8f4499fd9d0460d54f6664838f6ef7b3094a08089512fcd9d97
-
SSDEEP
49152:hpuG9skS/SqCRHFpIQYBGKscs8kljXeHE9JzFDvun:k/Sn6U1tlTek9JFun
Malware Config
Signatures
-
resource yara_rule behavioral15/memory/3024-1-0x0000000010000000-0x0000000010096000-memory.dmp upx behavioral15/memory/3024-28-0x0000000010000000-0x0000000010096000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch Delicious.exe Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" Delicious.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main Delicious.exe -
Suspicious behavior: EnumeratesProcesses 20 IoCs
pid Process 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe 3024 Delicious.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3024 Delicious.exe 3024 Delicious.exe