Overview

overview

7

Static

static

3

6151029394...18.exe

windows7-x64

7

6151029394...18.exe

windows10-2004-x64

7

"aminstall.dll

windows7-x64

1

"aminstall.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Speed.exe

windows7-x64

1

Speed.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Visit Game...om.url

windows7-x64

1

Visit Game...om.url

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/07/2024, 20:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    61510293940c6be2fbf4e8bd768745c5_JaffaCakes118.exe

  • Size

    2.6MB

  • MD5

    61510293940c6be2fbf4e8bd768745c5

  • SHA1

    6e87fc80cb7e8ac769f69c641d3ff22f2c8e6b3b

  • SHA256

    abc3661db5434da659ca06720af5a6b11515f694576731d2c6c8bb360d447413

  • SHA512

    8566b0ae88caf7e5895940a0f5de83544c1bcc0471129f7b7cd4f70f18195b00d7f1fe60b090fdc48162ee58e1ac55860da41ae65f9140e9e2048c5ffd29158f

  • SSDEEP

    49152:sjxY95WIEi2IPviNSkJzdoBVRGNsQ4oezF1E+dSa0I7j3kBM/:cxe5/LRPa4027k95ezQk7rkS

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\61510293940c6be2fbf4e8bd768745c5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\61510293940c6be2fbf4e8bd768745c5_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:4940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nss7475.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nss7475.tmp\System.dll
    Filesize

    9KB

    MD5

    e085476805e8f5ef1c7ed635c5309017

    SHA1

    609e79fdc29d6dee40cc5dd333094db5f9f63eec

    SHA256

    4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67

    SHA512

    082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nss7475.tmp\ioSpecial.ini
    Filesize

    678B

    MD5

    8e0983ce4ea616fbd96e6da7c3b88a8f

    SHA1

    94eec02303d0e1ca0b202f3a027564ea1d03c97f

    SHA256

    397c0e17d0c8f0f54f13ad6837d3cafb7ccf3d894d92919e21d5a464a2d627cd

    SHA512

    8675c3aef1c1880e60f00456e224d98c6687ad3bc3d6f60a81c1a2e4b64ad61b6eac3967fe5006c3a4f69009d31b109521987ae1ba9ffffc8162c15915595853

    Download Submit