Overview
overview
7Static
static
75f7b62cb0c...18.exe
windows7-x64
35f7b62cb0c...18.exe
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3SuperSave/...R2.exe
windows7-x64
7SuperSave/...R2.exe
windows10-2004-x64
7SuperSave/...R2.dll
windows7-x64
7SuperSave/...R2.dll
windows10-2004-x64
7SuperSave/...R2.exe
windows7-x64
7SuperSave/...R2.exe
windows10-2004-x64
7SuperSave/war3.exe
windows7-x64
7SuperSave/war3.exe
windows10-2004-x64
7Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
20/07/2024, 07:03
Behavioral task
behavioral1
Sample
5f7b62cb0c7b2218eeaf547f55bee1dc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f7b62cb0c7b2218eeaf547f55bee1dc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
SuperSave/$OUTDIR/UninstallTBR2.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
SuperSave/$OUTDIR/UninstallTBR2.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
SuperSave/HookTBR2.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
SuperSave/HookTBR2.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
SuperSave/SuperSaveTBR2.exe
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
SuperSave/SuperSaveTBR2.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
SuperSave/war3.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
SuperSave/war3.exe
Resource
win10v2004-20240709-en
General
-
Target
5f7b62cb0c7b2218eeaf547f55bee1dc_JaffaCakes118.exe
-
Size
107KB
-
MD5
5f7b62cb0c7b2218eeaf547f55bee1dc
-
SHA1
9063aa96266e08fd512f098b44d5b59075a4995a
-
SHA256
d5043bdeaa095e99e40e210e5f520d47891477447cc852344f2f6ce41ebc512c
-
SHA512
e68e9a7a660091e823c0c835e00e0bb148a621702bffef5aacffa0469dbfb75675b63dbfeefa13f4c74f01f606a6dcc01fa3f03671610bd976a7d3be80a5021a
-
SSDEEP
1536:jUeHiWRgkkjH8nyWmJjXtx+R7fHvwPgwhIsmlZ2q0q/RMZtnXdx6lETOoTVzRw+s:jd/vyWmJjX29AP9halZH9/R8tx9zRjm
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).