Overview
overview
3Static
static
1SMF_1.bat
windows7-x64
1SMF_1.bat
windows10-2004-x64
1SMF_2.bat
windows7-x64
1SMF_2.bat
windows10-2004-x64
1SMF_3.bat
windows7-x64
1SMF_3.bat
windows10-2004-x64
1SMF_NEW.bat
windows7-x64
1SMF_NEW.bat
windows10-2004-x64
1SUPER.bat
windows7-x64
1SUPER.bat
windows10-2004-x64
1ARHIWORM.bat
windows7-x64
1ARHIWORM.bat
windows10-2004-x64
1HLLPDUKE.exe
windows7-x64
HLLPDUKE.exe
windows10-2004-x64
SETUP.exe
windows7-x64
SETUP.exe
windows10-2004-x64
DVL6-08.js
windows7-x64
3DVL6-08.js
windows10-2004-x64
3DUMMY.exe
windows7-x64
DUMMY.exe
windows10-2004-x64
HLLS2ZYX.exe
windows7-x64
HLLS2ZYX.exe
windows10-2004-x64
HLLS2ZYX.js
windows7-x64
3HLLS2ZYX.js
windows10-2004-x64
3DVL6-09.js
windows7-x64
3DVL6-09.js
windows10-2004-x64
31.exe
windows7-x64
1.exe
windows10-2004-x64
2.exe
windows7-x64
2.exe
windows10-2004-x64
HLLS3ZYX.exe
windows7-x64
HLLS3ZYX.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
SMF_1.bat
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
SMF_1.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
SMF_2.bat
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
SMF_2.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
SMF_3.bat
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
SMF_3.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
SMF_NEW.bat
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
SMF_NEW.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
SUPER.bat
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
SUPER.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
ARHIWORM.bat
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
ARHIWORM.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
HLLPDUKE.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
HLLPDUKE.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
SETUP.exe
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
SETUP.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
DVL6-08.js
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
DVL6-08.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
DUMMY.exe
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
DUMMY.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
HLLS2ZYX.exe
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
HLLS2ZYX.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
HLLS2ZYX.js
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
HLLS2ZYX.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
DVL6-09.js
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
DVL6-09.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
1.exe
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
1.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
2.exe
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
2.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
HLLS3ZYX.exe
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
HLLS3ZYX.exe
Resource
win10v2004-20240709-en
General
-
Target
5d80a900135676712802a6013633bdab_JaffaCakes118
-
Size
360KB
-
MD5
5d80a900135676712802a6013633bdab
-
SHA1
f471b3c86407fe110380321f6a6ecb74132a2aa4
-
SHA256
d775419d99b3744a711a88e0ac065aac8a26ded14b9ca21edcd061909563074c
-
SHA512
52107e1aceaf120570d343c445bc6fbc8c148e74d448987e435b539e844dd92c187570a5aa384d4e7cda2df09089f4e30c0046ab69aa989e246329d9d5f07485
-
SSDEEP
6144:8XgFNttYvZXgfq6UPnKHCI9PSD5vnwyXdohnvyilOq9h/Fv+H+WM8V7RO7NOty0R:dJYvZXgy7uCwSFvnjXdohnNd9D8+sQN8
Malware Config
Signatures
Files
-
5d80a900135676712802a6013633bdab_JaffaCakes118.zip
-
DVL6-00.TXT
-
DVL6-01.TXT
-
DVL6-02.TXT
-
DVL6-03.TXT
-
DVL6-03A.ZIP.zip
-
SMF_1.BAT
-
SMF_2.BAT
-
SMF_3.BAT
-
DVL6-04.TXT
-
DVL6-04A.ZIP.zip
-
SMF_NEW.BAT
-
DVL6-05.TXT
-
DVL6-05A.ZIP.zip
-
SUPER.BAT
-
DVL6-06.TXT
-
DVL6-06A.ZIP.zip
-
ARHIWORM.BAT
-
DVL6-07.TXT
-
DVL6-07A.ZIP.zip
-
DISCRIPT.ION
-
FMRA_BEG.PAS
-
FMRA_BEG.TPU
-
FMRA_INC.INC
-
HLLPDUKE.EXE
-
HLLPDUKE.PAS
-
SETUP.EXE
-
SETUP.PAS
-
DVL6-08.TXT.js
-
DVL6-08A.ZIP.zip
-
DISCRIPT.ION
-
DUMMY.EXE
-
DUMMY.PAS
-
HLLS2ZYX.EXE
-
HLLS2ZYX.PAS.js
-
ZYX.TPU
-
DVL6-09.TXT.js
-
DVL6-09A.ZIP.zip
-
1.EXE
-
1.PAS
-
2.EXE
-
2.PAS
-
DISCRIPT.ION
-
HEAD.INC
-
HLLS3ZYX.EXE
-
HLLS3ZYX.PAS.js
-
TAIL.INC
-
ZYX.TPU
-
DVL6-10.TXT
-
DVL6-10A.ZIP.zip
-
FRIEND.EXE
-
FRIEND.PAS
-
DVL6-11.TXT.js
-
DVL6-11A.ZIP.zip
-
DVL6-12.TXT
-
DVL6-12A.ZIP.zip
-
DVL6-13.TXT.vbs
-
DVL6-13A.ZIP.zip
-
DVL6-14.TXT.js
-
DVL6-14A.ZIP.zip
-
DVL6-15.TXT
-
DVL6-15A.ZIP.zip
-
DVL6-16.TXT
-
DVL6-16A.ZIP.zip
-
DVL6-17.TXT
-
DVL6-17A.ZIP.zip
-
DVL6-18.TXT.vbs
-
DVL6-18A.ZIP.zip
-
DVL6-19.TXT
-
DVL6-19A.ZIP.zip
-
DVL6-20.TXT
-
DVL6-20A.ZIP.zip
-
DVL6-21.TXT
-
DVL6-21A.ZIP.zip
-
DVL6-22.TXT
-
DVL6-22A.ZIP.zip
-
DVL6-23.TXT
-
DVL6-24.TXT
-
DVL6-25.TXT
-
DVL6-26.TXT
-
DVL6-27.TXT
-
FILE_ID.DIZ
-
PICTURES/KASPERSK.JPG.jpg
-
PICTURES/MCFVRC.GIF.gif
-
PICTURES/PICTURES.TXT
-
PICTURES/VLOGO.JPG.jpg
-
SMF.NFO