Overview
overview
7Static
static
362d3dd3d74...18.exe
windows7-x64
762d3dd3d74...18.exe
windows10-2004-x64
7$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$SMPROGRAM...վ.lnk
windows7-x64
3$SMPROGRAM...վ.lnk
windows10-2004-x64
3155�...վ.lnk
windows7-x64
3155�...վ.lnk
windows10-2004-x64
3BrixoutXP.exe
windows7-x64
1BrixoutXP.exe
windows10-2004-x64
1bass.dll
windows7-x64
1bass.dll
windows10-2004-x64
1config.vbs
windows7-x64
1config.vbs
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7Analysis
-
max time kernel
131s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
22-07-2024 10:16
Static task
static1
Behavioral task
behavioral1
Sample
62d3dd3d740e93bc1e55c89c0773154d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62d3dd3d740e93bc1e55c89c0773154d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$SMPROGRAMS/שXP/155ɫվ.lnk
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$SMPROGRAMS/שXP/155ɫվ.lnk
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
155ɫվ.lnk
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
155ɫվ.lnk
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
BrixoutXP.exe
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
BrixoutXP.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
bass.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
bass.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
config.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
config.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
uninst.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
uninst.exe
Resource
win10v2004-20240709-en
General
-
Target
BrixoutXP.exe
-
Size
300KB
-
MD5
5caf58212b6ccd8c4d80d764f900de47
-
SHA1
8e3d5701d4958efbc4e47a034f4a9bf7e41286a5
-
SHA256
cce953a8ac0e8f0de05b68e5dfc8540a3a5a735c157a8ad5650168a501abc466
-
SHA512
1946e602e01b007b7d559acb643ff9c75136911ac12652e03ddbb3c599ea7ccf38c20b8f91373e112c0e154cb57defb3af7bfa163f59df45c17c542468322916
-
SSDEEP
6144:ebEKVrGI8P+YsInXAhgPU3zAsflPZ2AQ:eEKpnYFnXAhcMzAsNPb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2284 BrixoutXP.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2284 BrixoutXP.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
481B
MD5c09eb0216479e5a09217a43563039d45
SHA160830465262d66d5d9a606a409ea40b20c76a116
SHA256561f7f443c85ce801d9d71f6367b44d1424ebf97cb317ea9f586a00f8e20398d
SHA51258699da69b21c19d817b27b9b239954ca71f9052576e88e5bca368efa1d45ef5893ea45874e6218fcc6dc614099eb818cdb361873827a47bb1e90631656e726c
-
Filesize
4KB
MD5334ad3ec34327d6c56eea1bc4387fd5b
SHA1d3ae5aebac8c6470efddc481385ceb438fc386ac
SHA256c336d756ec76602f560b21718ed4a68df8e9ddea6c165faa6bc4907959b0a177
SHA512a7edfb0f22ec57c4d8ce7b7e5727204715f81b14778ceb1c43a4a2ab54b41a4a67a8cea87ddb72674bb31c690515a4b024a1d0cb6ca1cab1139f6aae5ac15108