Overview
overview
3Static
static
366d66b06d2...18.exe
windows7-x64
366d66b06d2...18.exe
windows10-2004-x64
3$PLUGINSDI...up.exe
windows7-x64
3$PLUGINSDI...up.exe
windows10-2004-x64
3$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3FLVTubePlayer.exe
windows7-x64
FLVTubePlayer.exe
windows10-2004-x64
$PLUGINSDI...Ex.dll
windows7-x64
3$PLUGINSDI...Ex.dll
windows10-2004-x64
3$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
1$PLUGINSDI...ss.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDIR/nswg.dll
windows7-x64
3$PLUGINSDIR/nswg.dll
windows10-2004-x64
3$PLUGINSDI...e.html
windows7-x64
1$PLUGINSDI...e.html
windows10-2004-x64
1$PLUGINSDI...w.html
windows7-x64
1$PLUGINSDI...w.html
windows10-2004-x64
1General
-
Target
66d66b06d25511012a638b8b15150a0c_JaffaCakes118
-
Size
396KB
-
Sample
240723-kexaqawgre
-
MD5
66d66b06d25511012a638b8b15150a0c
-
SHA1
1586cdf150f031f97a966e3fb4c011ab16e6745c
-
SHA256
aefed0b6075d80bea04701191e44fd5fe50f17b9554ab512c3e789417b04c592
-
SHA512
c4a89b7ef2195fb5bea9311d554d238a8ad56a8d64e7b0a622c2105d8620e7e8c6c6921b5c0188d40f5a47cc51a108be876cf258b9ead29940ed57cab13823b6
-
SSDEEP
6144:BsvkOdcEeRL/quMhLgPTazMQeL2WjIampUcMIcMY4QKrsTUcPGgKO+EwOhZtvHFA:Cfd7eeh0T0MbcasU/KYvPGg+utYjCs
Static task
static1
Behavioral task
behavioral1
Sample
66d66b06d25511012a638b8b15150a0c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66d66b06d25511012a638b8b15150a0c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FLVTubePlayerSetup.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FLVTubePlayerSetup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
FLVTubePlayer.exe
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
FLVTubePlayer.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InetLoadEx.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InetLoadEx.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/Progress.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/Progress.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/blowfish.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/blowfish.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nswg.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nswg.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/welcomepage.html
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/welcomepage.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/welcomepage_noadw.html
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/welcomepage_noadw.html
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
66d66b06d25511012a638b8b15150a0c_JaffaCakes118
-
Size
396KB
-
MD5
66d66b06d25511012a638b8b15150a0c
-
SHA1
1586cdf150f031f97a966e3fb4c011ab16e6745c
-
SHA256
aefed0b6075d80bea04701191e44fd5fe50f17b9554ab512c3e789417b04c592
-
SHA512
c4a89b7ef2195fb5bea9311d554d238a8ad56a8d64e7b0a622c2105d8620e7e8c6c6921b5c0188d40f5a47cc51a108be876cf258b9ead29940ed57cab13823b6
-
SSDEEP
6144:BsvkOdcEeRL/quMhLgPTazMQeL2WjIampUcMIcMY4QKrsTUcPGgKO+EwOhZtvHFA:Cfd7eeh0T0MbcasU/KYvPGg+utYjCs
Score3/10 -
-
-
Target
$PLUGINSDIR/FLVTubePlayerSetup.exe
-
Size
178KB
-
MD5
768908a0282c1bf7edc3f58b4f360352
-
SHA1
b0e9bf414cea346d235f827028ffbf11bc1af6a2
-
SHA256
1ec2c041795ad67b823ca4df829fcf3a747ffadac10d1a5c37a8dfadde5dce49
-
SHA512
af094cfa834b6d9ddee4eb004c1f3830765c09eb6e358224038b0ac55f31c397ef5c92f14a52c4d950f44f038a254cafbab7c3dec0575ef5b08adc40c0fd7080
-
SSDEEP
3072:XQIURTXJ5Nuq31s5pUAo0fVf+yyGd+cwXz6T2NNNSyD5XnaMIOI:XsvNv4px1fVf+/Gdzwj22O2azOI
Score3/10 -
-
-
Target
$PLUGINSDIR/Processes.dll
-
Size
35KB
-
MD5
2cfba79d485cf441c646dd40d82490fc
-
SHA1
83e51ac1115a50986ed456bd18729653018b9619
-
SHA256
86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
-
SHA512
cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
-
SSDEEP
768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
FLVTubePlayer.exe
-
Size
196KB
-
MD5
5dc9c86133d49c38c548404ae47dbcc3
-
SHA1
41c6dc369c5c0081001dbccd4a4a1d6928440ba1
-
SHA256
b64d8294f5819371975fa0073dd75c05d2b5cf6ee7b2312f5eb55d62b8dd743c
-
SHA512
66bd959678cf2043e5ac8137fdc33e5810948eefa553fdf25e60ae973da1d6cf4f69cf1162a14132e133959e1ea2280082abff3de02afe176e4227b689a23147
-
SSDEEP
6144:LCqZZ5X8otN7qlgabS2l2bAXNakgYm99wXrwhJC:fMaNOlgmS2Ukzm/wXQC
Score1/10 -
-
-
Target
$PLUGINSDIR/InetLoadEx.dll
-
Size
55KB
-
MD5
9fae574b1004bb0650eebba3d8040c59
-
SHA1
541583ec14af05915b8efefe520edd4f25914c9a
-
SHA256
73f4a1529acf2ea56d4db9ed8134bed0498cea38903105f7c2af8cc7d11b8db3
-
SHA512
ab25c429301f2d8a2da6b7c2a222c4028ad8e393c67dde83606762a8ba49c6c49460538624a799969dd0b3c810623d7e471c65a390e8661228a621580d7d54c7
-
SSDEEP
768:WFKaQrcF+ntygjX/+qEg469TRphsguCtPQpcQaa5jZ19K:WIaQrs0kgjx9TRsg1ox5H
Score3/10 -
-
-
Target
$PLUGINSDIR/Processes.dll
-
Size
35KB
-
MD5
2cfba79d485cf441c646dd40d82490fc
-
SHA1
83e51ac1115a50986ed456bd18729653018b9619
-
SHA256
86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
-
SHA512
cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
-
SSDEEP
768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score3/10 -
-
-
Target
$PLUGINSDIR/Progress.dll
-
Size
80KB
-
MD5
15e01578481287bbcf32d2217f1b5246
-
SHA1
67a7d05bb2f8b33980867d3352280fa0cd0b4e9f
-
SHA256
61d8f9eba68cc6e2a83ec6d1689b2aa45e06bc32e13cdfcec8b593a14bc8bf70
-
SHA512
9a83832faf20eaef5043f69d468bfe032d790274df25bae73bce4f7830ac83587d7e23dba531bff04951cbed67399386d9ea4337002a99d8cf61de3f8e33b674
-
SSDEEP
768:WCFSITRx/imU5IBAczjPj+NbHHFJUzWwrhABjknWgiLLhfv09jaYhdb5P8mDnbK:+8xzUKBZo0zWWhskjiLwR/5P3b
Score1/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/blowfish.dll
-
Size
60KB
-
MD5
926e4475c00fb5254c32c876921b77d0
-
SHA1
8a55bc8b6e49021a4abbd441783c41d5e019798b
-
SHA256
d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
-
SHA512
53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
-
SSDEEP
768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score3/10 -
-
-
Target
$PLUGINSDIR/nswg.dll
-
Size
182KB
-
MD5
4f2b563f712670211d0e932e43b6e277
-
SHA1
53014306f362c90af7f58ad546237e6310e58fd3
-
SHA256
9319a8a37139cbc5ac27e9f4c4583d615929a9ea681f5212a5f7bad07fcdbdff
-
SHA512
414839a7e4b4d07d4f9c0b10ec708d12547b6866b9567383c0784abb77631a1b60e24a4d450980f8f6c97249b319150062566e12d44bd35b476f9f06aec66652
-
SSDEEP
3072:EjcNKEYgmbSZZWxRw+LvCUDk7rkOFyCUQ9C4jO1wMPCxb5rw06w:JNMOWgmDk8Og9Q9C4jzMPCxhw1w
Score3/10 -
-
-
Target
$PLUGINSDIR/welcomepage.html
-
Size
5KB
-
MD5
1004a88bdeea82e7ef4dfc62396b1a00
-
SHA1
0de1e852a8349734d726ab35df540d1a1c177c00
-
SHA256
e3903f421979faf30a9324b35cbb4c2aadd299efa1cfb3e48446f6703207ffae
-
SHA512
71af71c78b74d53b1ab3180519c66ba2982ff2b467bb9bedf5b410a0543df22e39c49fae7e8bcbc12cea547aceda17828ba34bc8717c2bd5da23bc0f7a7eaf82
-
SSDEEP
96:SI32bJiWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1Dusp8V+N35yN64WVA1:SI0iWEM6Sf75ugffDtIDHEBDzwfF//45
Score1/10 -
-
-
Target
$PLUGINSDIR/welcomepage_noadw.html
-
Size
5KB
-
MD5
e46d56308f9812a43b025832521fa69e
-
SHA1
627b206f3bffe6f2d5e662101c155720615ee88e
-
SHA256
09f863f9bf5940d35976453c5266a9d8a1ce87e07b8dd513e7574cfaef735d34
-
SHA512
439c73dba7fd17da848d9a4289b9b7f25e55c4fc3e98d6d3eeef160817a8013a796ff65e12b30e41827bf2110e71bb4b8358ca182783b3f22502707a69d8d7f5
-
SSDEEP
96:SI32bJbWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1Dusp8SNy7Pt:SI0bWEM6Sf75ugffDtIDHEBDzwfF//4j
Score1/10 -