Overview

overview

7

Static

static

3

6151029394...18.exe

windows7-x64

7

6151029394...18.exe

windows10-2004-x64

7

"aminstall.dll

windows7-x64

1

"aminstall.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Speed.exe

windows7-x64

1

Speed.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Visit Game...om.url

windows7-x64

1

Visit Game...om.url

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 20:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    61510293940c6be2fbf4e8bd768745c5_JaffaCakes118.exe

  • Size

    2.6MB

  • MD5

    61510293940c6be2fbf4e8bd768745c5

  • SHA1

    6e87fc80cb7e8ac769f69c641d3ff22f2c8e6b3b

  • SHA256

    abc3661db5434da659ca06720af5a6b11515f694576731d2c6c8bb360d447413

  • SHA512

    8566b0ae88caf7e5895940a0f5de83544c1bcc0471129f7b7cd4f70f18195b00d7f1fe60b090fdc48162ee58e1ac55860da41ae65f9140e9e2048c5ffd29158f

  • SSDEEP

    49152:sjxY95WIEi2IPviNSkJzdoBVRGNsQ4oezF1E+dSa0I7j3kBM/:cxe5/LRPa4027k95ezQk7rkS

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\61510293940c6be2fbf4e8bd768745c5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\61510293940c6be2fbf4e8bd768745c5_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsyAE69.tmp\ioSpecial.ini
    Filesize

    678B

    MD5

    a9961c1eb1db53793e1f4ade2214bbad

    SHA1

    45d09095e07c903b64c8c7b6fc514f5191f0c086

    SHA256

    4a65bbe9e9b519a5971dc56e3a389e04710fca9f3d87af5f3273604ec663bdb4

    SHA512

    e0719d70d2d35e7443bb26dcd301889d7c04216c413f33aca9503282c7855f49d4d4455b2d0404b090f23631e59d6f41db6175a59555d9756991b785684429af

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsyAE69.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsyAE69.tmp\System.dll
    Filesize

    9KB

    MD5

    e085476805e8f5ef1c7ed635c5309017

    SHA1

    609e79fdc29d6dee40cc5dd333094db5f9f63eec

    SHA256

    4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67

    SHA512

    082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f

    Download Submit