Overview
overview
7Static
static
35f941637d2...18.exe
windows7-x64
75f941637d2...18.exe
windows10-2004-x64
7$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...ge.dll
windows7-x64
3$PLUGINSDI...ge.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$TEMP/nsisos.dll
windows7-x64
1$TEMP/nsisos.dll
windows10-2004-x64
1AddScheduler.exe
windows7-x64
1AddScheduler.exe
windows10-2004-x64
1BoanSupport.exe
windows7-x64
3BoanSupport.exe
windows10-2004-x64
7BoanSupportMon.exe
windows7-x64
3BoanSupportMon.exe
windows10-2004-x64
3BoanSupportcfg.exe
windows7-x64
3BoanSupportcfg.exe
windows10-2004-x64
7Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
20-07-2024 07:31
Static task
static1
Behavioral task
behavioral1
Sample
5f941637d2387b4dfbccfb7f30bae8ba_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f941637d2387b4dfbccfb7f30bae8ba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DLLWebCount.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DLLWebCount.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/ExLicenseBoanSupportPage.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ExLicenseBoanSupportPage.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$TEMP/nsisos.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
$TEMP/nsisos.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
AddScheduler.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
AddScheduler.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
BoanSupport.exe
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
BoanSupport.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
BoanSupportMon.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
BoanSupportMon.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
BoanSupportcfg.exe
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
BoanSupportcfg.exe
Resource
win10v2004-20240709-en
General
-
Target
AddScheduler.exe
-
Size
379KB
-
MD5
f6f71b8d45855097641549c59a13630b
-
SHA1
e8b4250b58993c1550f96e9a74db2058ad302019
-
SHA256
5e8ebf54e987804b6f06880505240ca1fe14c70d3a10e9de580f37adb933b029
-
SHA512
5b64683f9d9ead2e2f036fba34b231021f01be84fcec47f61c8595da28b9951bfa8f0f85b70ff8e3181212cb01a0cffb9e00e18ca92306e3b8c119bb43f3488f
-
SSDEEP
6144:U7GS1D7K18xPMQvF01cwaP0SCS8GMSQSlgTJ9Of+F/p/uwONct43D92U:R8xPvv9P0SCS84l+TJ959pGHNu4B2U
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1948 AddScheduler.exe