Overview
overview
3Static
static
331cbaa4cee...18.exe
windows7-x64
331cbaa4cee...18.exe
windows10-2004-x64
3$PLUGINSDI...up.exe
windows7-x64
3$PLUGINSDI...up.exe
windows10-2004-x64
3$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$R1.exe
windows7-x64
$R1.exe
windows10-2004-x64
$PLUGINSDI...Ex.dll
windows7-x64
3$PLUGINSDI...Ex.dll
windows10-2004-x64
3$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
1$PLUGINSDI...ss.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDIR/nswg.dll
windows7-x64
3$PLUGINSDIR/nswg.dll
windows10-2004-x64
3$PLUGINSDI...e.html
windows7-x64
1$PLUGINSDI...e.html
windows10-2004-x64
1$PLUGINSDI...w.html
windows7-x64
1$PLUGINSDI...w.html
windows10-2004-x64
1General
-
Target
31cbaa4cee453298b39c337025920ef4_JaffaCakes118
-
Size
591KB
-
Sample
240709-yvkhrashnp
-
MD5
31cbaa4cee453298b39c337025920ef4
-
SHA1
49b95ff689144b1f819ed4ae354474ca196af23b
-
SHA256
e0ead01ee6285d57a4c3d12c13177e2e4dc20da79f5a0ffbe1ded54026fce3b2
-
SHA512
bba9067e9d03b7c955e2666f1177c2fd9c5c6ba70025e570836789760cea29b0f7507c3d9bb178a31e6fda3b3e23f721fe748703a9482b269cd318b01221bd26
-
SSDEEP
12288:Rp0nJVwiz3HS1WemsD6Qw/9GU76MrTx05cw6EllyCFBUd:wnJ73y1WPsD6QCTu1qullyC/Ud
Static task
static1
Behavioral task
behavioral1
Sample
31cbaa4cee453298b39c337025920ef4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31cbaa4cee453298b39c337025920ef4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FLVProPlayerSetup.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FLVProPlayerSetup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/blowfish.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/blowfish.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
$R1.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$R1.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/InetLoadEx.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/InetLoadEx.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/Progress.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/Progress.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/blowfish.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/blowfish.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nswg.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nswg.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/welcomepage.html
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/welcomepage.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/welcomepage_noadw.html
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/welcomepage_noadw.html
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
31cbaa4cee453298b39c337025920ef4_JaffaCakes118
-
Size
591KB
-
MD5
31cbaa4cee453298b39c337025920ef4
-
SHA1
49b95ff689144b1f819ed4ae354474ca196af23b
-
SHA256
e0ead01ee6285d57a4c3d12c13177e2e4dc20da79f5a0ffbe1ded54026fce3b2
-
SHA512
bba9067e9d03b7c955e2666f1177c2fd9c5c6ba70025e570836789760cea29b0f7507c3d9bb178a31e6fda3b3e23f721fe748703a9482b269cd318b01221bd26
-
SSDEEP
12288:Rp0nJVwiz3HS1WemsD6Qw/9GU76MrTx05cw6EllyCFBUd:wnJ73y1WPsD6QCTu1qullyC/Ud
Score3/10 -
-
-
Target
$PLUGINSDIR/FLVProPlayerSetup.exe.exe
-
Size
362KB
-
MD5
d236662bd273ca6f3613c51df08ec5e3
-
SHA1
aa79646062b812b6f28755aeccd16c356c9ccf23
-
SHA256
0fc95cb1b4a5694e4f2ccc68de31cbb2efc1f54e22c4f9093c4c2fb217d74388
-
SHA512
4ea967d1ff465140bbd76fae89f9b46e1fafc36a4c208a26efb2c83c0ea3ba5681698db3635d20a38e9361764ff25a16d7135a9352b5fa7f44f1d1492a4624e4
-
SSDEEP
6144:XsBNvhbGcKHERHGM7TcdFldr20xDSsGM+s3T4wC47V2UaGLgsFmF60pAkNHqFnvD:ev1P0Y+FldzxmsZ+s3c3UaGLgseBpNHY
Score3/10 -
-
-
Target
$PLUGINSDIR/Processes.dll
-
Size
35KB
-
MD5
2cfba79d485cf441c646dd40d82490fc
-
SHA1
83e51ac1115a50986ed456bd18729653018b9619
-
SHA256
86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
-
SHA512
cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
-
SSDEEP
768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/blowfish.dll
-
Size
60KB
-
MD5
926e4475c00fb5254c32c876921b77d0
-
SHA1
8a55bc8b6e49021a4abbd441783c41d5e019798b
-
SHA256
d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
-
SHA512
53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
-
SSDEEP
768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$R1
-
Size
649KB
-
MD5
4fb65008e4805eb63eaef09491f91703
-
SHA1
29f633d39ab0e433a05c04a399d8690a02fe7694
-
SHA256
c9cfdc789cbe2dfee95a7f9ea9ffe675f374848ea55595cc08967ce7c733ea7c
-
SHA512
1a7df3fd0253703a66c6dfa27ae655a005ad86dce27f5cedf645c12d42b61bcf039431f000b82347f6e98d2568b07b33d6a2a54a099698a9ed33bfd21ba9f425
-
SSDEEP
12288:xiGTowGTuTk5AbwnW+C+OAYYoinVjD1uJK5CG:kPP5nR8inhD1UG
Score1/10 -
-
-
Target
$PLUGINSDIR/InetLoadEx.dll
-
Size
55KB
-
MD5
9fae574b1004bb0650eebba3d8040c59
-
SHA1
541583ec14af05915b8efefe520edd4f25914c9a
-
SHA256
73f4a1529acf2ea56d4db9ed8134bed0498cea38903105f7c2af8cc7d11b8db3
-
SHA512
ab25c429301f2d8a2da6b7c2a222c4028ad8e393c67dde83606762a8ba49c6c49460538624a799969dd0b3c810623d7e471c65a390e8661228a621580d7d54c7
-
SSDEEP
768:WFKaQrcF+ntygjX/+qEg469TRphsguCtPQpcQaa5jZ19K:WIaQrs0kgjx9TRsg1ox5H
Score3/10 -
-
-
Target
$PLUGINSDIR/Processes.dll
-
Size
35KB
-
MD5
2cfba79d485cf441c646dd40d82490fc
-
SHA1
83e51ac1115a50986ed456bd18729653018b9619
-
SHA256
86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
-
SHA512
cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
-
SSDEEP
768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score3/10 -
-
-
Target
$PLUGINSDIR/Progress.dll
-
Size
80KB
-
MD5
15e01578481287bbcf32d2217f1b5246
-
SHA1
67a7d05bb2f8b33980867d3352280fa0cd0b4e9f
-
SHA256
61d8f9eba68cc6e2a83ec6d1689b2aa45e06bc32e13cdfcec8b593a14bc8bf70
-
SHA512
9a83832faf20eaef5043f69d468bfe032d790274df25bae73bce4f7830ac83587d7e23dba531bff04951cbed67399386d9ea4337002a99d8cf61de3f8e33b674
-
SSDEEP
768:WCFSITRx/imU5IBAczjPj+NbHHFJUzWwrhABjknWgiLLhfv09jaYhdb5P8mDnbK:+8xzUKBZo0zWWhskjiLwR/5P3b
Score1/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/blowfish.dll
-
Size
60KB
-
MD5
926e4475c00fb5254c32c876921b77d0
-
SHA1
8a55bc8b6e49021a4abbd441783c41d5e019798b
-
SHA256
d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
-
SHA512
53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
-
SSDEEP
768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score3/10 -
-
-
Target
$PLUGINSDIR/nswg.dll
-
Size
182KB
-
MD5
4f2b563f712670211d0e932e43b6e277
-
SHA1
53014306f362c90af7f58ad546237e6310e58fd3
-
SHA256
9319a8a37139cbc5ac27e9f4c4583d615929a9ea681f5212a5f7bad07fcdbdff
-
SHA512
414839a7e4b4d07d4f9c0b10ec708d12547b6866b9567383c0784abb77631a1b60e24a4d450980f8f6c97249b319150062566e12d44bd35b476f9f06aec66652
-
SSDEEP
3072:EjcNKEYgmbSZZWxRw+LvCUDk7rkOFyCUQ9C4jO1wMPCxb5rw06w:JNMOWgmDk8Og9Q9C4jzMPCxhw1w
Score3/10 -
-
-
Target
$PLUGINSDIR/welcomepage.html
-
Size
5KB
-
MD5
4df1fdae99a99c7a202e889dbd41d33f
-
SHA1
0bef5beda262ac4c011826ef65ef65d1dda5f5c5
-
SHA256
f5792ef5d085448c3aedb3a5338c1599372bbbdd18012c00ef36f198fc910fe8
-
SHA512
6471a002a1215f4c74dfb9d3e75815a21d0cefde0f25c1223a8cf7a70cb0edbccf8be54f08008a88a13877987fe29f855bd9b6bcb2fc22b355acb57176eff87a
-
SSDEEP
96:SI32bJiWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1DuspXqN35yN64WVAPt:SI0iWEM6Sf75ugffDtIDHEBDzwfF//4M
Score1/10 -
-
-
Target
$PLUGINSDIR/welcomepage_noadw.html
-
Size
5KB
-
MD5
503788b7c7fc1e94d3881697dc0f9455
-
SHA1
c9710548dd90191732aa428957988039d9014ced
-
SHA256
bff319cb4251e23c995abc742d926b7c85b9798783ac9dad8e8cdc274ede423c
-
SHA512
138f60cc8d168004325dcf2452f24fdd29a3fddc6f693326d01c614a6638c1d40ce9f7b1766b9440de8012d05977adc0f2b92eb02aa76d44ee7dfbc99cd24748
-
SSDEEP
96:SI32bJbWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1DuspXdNy7Pt:SI0bWEM6Sf75ugffDtIDHEBDzwfF//4r
Score1/10 -