Overview
overview
7Static
static
1quvbedmx/a.bat
windows7-x64
1quvbedmx/a.bat
windows10-2004-x64
1quvbedmx/bemoc.bat
windows7-x64
1quvbedmx/bemoc.bat
windows10-2004-x64
1quvbedmx/e.bat
windows7-x64
1quvbedmx/e.bat
windows10-2004-x64
1quvbedmx/efngwwlm.bat
windows7-x64
1quvbedmx/efngwwlm.bat
windows10-2004-x64
1quvbedmx/fngwwln.bat
windows7-x64
1quvbedmx/fngwwln.bat
windows10-2004-x64
1quvbedmx/fobohbi.bat
windows7-x64
1quvbedmx/fobohbi.bat
windows10-2004-x64
1quvbedmx/foboode.bat
windows7-x64
1quvbedmx/foboode.bat
windows10-2004-x64
1quvbedmx/ge.bat
windows7-x64
1quvbedmx/ge.bat
windows10-2004-x64
1quvbedmx/gwdst.bat
windows7-x64
1quvbedmx/gwdst.bat
windows10-2004-x64
1quvbedmx/jelxktam.bat
windows7-x64
1quvbedmx/jelxktam.bat
windows10-2004-x64
1quvbedmx/n.bat
windows7-x64
1quvbedmx/n.bat
windows10-2004-x64
1quvbedmx/nkp.bat
windows7-x64
1quvbedmx/nkp.bat
windows10-2004-x64
1quvbedmx/wmm.bat
windows7-x64
1quvbedmx/wmm.bat
windows10-2004-x64
1quvbedmx/wmn.bat
windows7-x64
1quvbedmx/wmn.bat
windows10-2004-x64
1quvbedmx/xvwl.bat
windows7-x64
1quvbedmx/xvwl.bat
windows10-2004-x64
1start.bat
windows7-x64
7start.bat
windows10-2004-x64
7Static task
static1
Behavioral task
behavioral1
Sample
quvbedmx/a.bat
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
quvbedmx/a.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
quvbedmx/bemoc.bat
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
quvbedmx/bemoc.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
quvbedmx/e.bat
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
quvbedmx/e.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
quvbedmx/efngwwlm.bat
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
quvbedmx/efngwwlm.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
quvbedmx/fngwwln.bat
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
quvbedmx/fngwwln.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
quvbedmx/fobohbi.bat
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
quvbedmx/fobohbi.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
quvbedmx/foboode.bat
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
quvbedmx/foboode.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
quvbedmx/ge.bat
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
quvbedmx/ge.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
quvbedmx/gwdst.bat
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
quvbedmx/gwdst.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
quvbedmx/jelxktam.bat
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
quvbedmx/jelxktam.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
quvbedmx/n.bat
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
quvbedmx/n.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
quvbedmx/nkp.bat
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
quvbedmx/nkp.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
quvbedmx/wmm.bat
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
quvbedmx/wmm.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
quvbedmx/wmn.bat
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
quvbedmx/wmn.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
quvbedmx/xvwl.bat
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
quvbedmx/xvwl.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
start.bat
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
start.bat
Resource
win10v2004-20240709-en
General
-
Target
714a3ec96ba1fa21438e63976d6f33d3_JaffaCakes118
-
Size
223KB
-
MD5
714a3ec96ba1fa21438e63976d6f33d3
-
SHA1
1187f999e55b6c47b0b86192775f5fef38dd1d69
-
SHA256
d83d0d2611c29bece43c953f145917c16882e1969d64951cd3504f594d383b1b
-
SHA512
fd1009757dca4853b47c09bd2b5b970f0e6ef9c259e88966b75d9d399a23cf0932bc9032be8b1b160de436c770dd32f698622d66b2cd8cbed5f9b32f1b5ba66e
-
SSDEEP
1536:H3W74jYmsR+3sfnksj4qtIDFtyCs02+QJ1hrkijppFq1:XW74jYesnj4qODSCs02phFjpq1
Malware Config
Signatures
Files
-
714a3ec96ba1fa21438e63976d6f33d3_JaffaCakes118.rar
-
quvbedmx/a.bat
-
quvbedmx/acdyo.tmp
-
quvbedmx/afyy.tmp
-
quvbedmx/ai.tmp
-
quvbedmx/akryji.tmp
-
quvbedmx/amdhb.tmp
-
quvbedmx/amdhl.tmp
-
quvbedmx/amkd.tmp
-
quvbedmx/amsl.tmp
-
quvbedmx/anbusiu.tmp
-
quvbedmx/apbvi.tmp
-
quvbedmx/aqast.tmp
-
quvbedmx/aqbkcnk.tmp
-
quvbedmx/arqiw.tmp
-
quvbedmx/aszrre.tmp
-
quvbedmx/aszrrn.tmp
-
quvbedmx/at.tmp
-
quvbedmx/auwy.tmp
-
quvbedmx/axhuepm.tmp
-
quvbedmx/axhvxnp.tmp
-
quvbedmx/ay.tmp
-
quvbedmx/b.tmp
-
quvbedmx/bbqweopg.tmp
-
quvbedmx/bemoc.bat
-
quvbedmx/bizfm.tmp
-
quvbedmx/bj.tmp
-
quvbedmx/bo.tmp
-
quvbedmx/bwgin.tmp
-
quvbedmx/bwpnu.tmp
-
quvbedmx/cbilcn.tmp
-
quvbedmx/ce.tmp
-
quvbedmx/cmlc.tmp
-
quvbedmx/cn.tmp
-
quvbedmx/cne.tmp
-
quvbedmx/cuhfwicy.tmp
-
quvbedmx/cxs.tmp
-
quvbedmx/d.tmp
-
quvbedmx/dakl.tmp
-
quvbedmx/dat.tmp
-
quvbedmx/dhs.tmp
-
quvbedmx/dhsi.tmp
-
quvbedmx/dik.tmp
-
quvbedmx/du.tmp
-
quvbedmx/dvo.tmp
-
quvbedmx/dwmfyk.tmp
-
quvbedmx/dxboxh.tmp
-
quvbedmx/dxwcn.tmp
-
quvbedmx/dyr.tmp
-
quvbedmx/e.bat
-
quvbedmx/e.tmp
-
quvbedmx/eb.tmp
-
quvbedmx/ecubpr.tmp
-
quvbedmx/efngwwlm.bat
-
quvbedmx/ehvart.tmp
-
quvbedmx/ehyh.tmp
-
quvbedmx/ehz.tmp
-
quvbedmx/elv.tmp
-
quvbedmx/eo.tmp
-
quvbedmx/eot.tmp
-
quvbedmx/eowehhp.tmp
-
quvbedmx/eowehyh.tmp
-
quvbedmx/epm.tmp
-
quvbedmx/er.tmp
-
quvbedmx/etio.tmp
-
quvbedmx/eubyvj.tmp
-
quvbedmx/f.tmp
-
quvbedmx/fallwlx.tmp
-
quvbedmx/fbejgtg.tmp
-
quvbedmx/fihelv.tmp
-
quvbedmx/fkbarho.tmp
-
quvbedmx/fngwwln.bat
-
quvbedmx/fobohbi.bat
-
quvbedmx/foboode.bat
-
quvbedmx/fyy.tmp
-
quvbedmx/g.tmp
-
quvbedmx/gafvxu.tmp
-
quvbedmx/ge.bat
-
quvbedmx/ghdbmj.tmp
-
quvbedmx/gihwkt.tmp
-
quvbedmx/gihwql.tmp
-
quvbedmx/gjgihwkt.tmp
-
quvbedmx/gjgihwql.tmp
-
quvbedmx/gjonamkd.tmp
-
quvbedmx/gjonamsl.tmp
-
quvbedmx/gjonwtlu.tmp
-
quvbedmx/gk.tmp
-
quvbedmx/gkfihelv.tmp
-
quvbedmx/glpiadvo.tmp
-
quvbedmx/gnhi.tmp
-
quvbedmx/go.tmp
-
quvbedmx/gqkuan.tmp
-
quvbedmx/gv.tmp
-
quvbedmx/gvy.tmp
-
quvbedmx/gwdst.bat
-
quvbedmx/gyumymzn.tmp
-
quvbedmx/h.tmp
-
quvbedmx/hbxn.tmp
-
quvbedmx/he.tmp
-
quvbedmx/helx.tmp
-
quvbedmx/hikdbb.tmp
-
quvbedmx/hiljikan.tmp
-
quvbedmx/hkbj.tmp
-
quvbedmx/hko.tmp
-
quvbedmx/hl.tmp
-
quvbedmx/hotcxhr.tmp
-
quvbedmx/ht.tmp
-
quvbedmx/htomihk.tmp
-
quvbedmx/hvbwpnu.tmp
-
quvbedmx/hwkt.tmp
-
quvbedmx/hwql.tmp
-
quvbedmx/hyh.tmp
-
quvbedmx/i.tmp
-
quvbedmx/iciy.tmp
-
quvbedmx/iehm.tmp
-
quvbedmx/ihelv.tmp
-
quvbedmx/ihx.tmp
-
quvbedmx/iijrs.tmp
-
quvbedmx/iiptk.tmp
-
quvbedmx/irob.tmp
-
quvbedmx/itqbb.tmp
-
quvbedmx/iymc.tmp
-
quvbedmx/jbgbxksm.tmp
-
quvbedmx/jddh.tmp
-
quvbedmx/jelxktam.bat
-
quvbedmx/jhotohts.tmp
-
quvbedmx/jhozuoay.tmp
-
quvbedmx/jhtjjqpy.tmp
-
quvbedmx/jhvdjiop.tmp
-
quvbedmx/jhzo.tmp
-
quvbedmx/ji.tmp
-
quvbedmx/jiop.tmp
-
quvbedmx/jmgtnfm.tmp
-
quvbedmx/jmmiaaw.tmp
-
quvbedmx/joxbcne.tmp
-
quvbedmx/joxbgvy.tmp
-
quvbedmx/jqap.tmp
-
quvbedmx/k.tmp
-
quvbedmx/kb.tmp
-
quvbedmx/kd.tmp
-
quvbedmx/kdyvdmaw.tmp
-
quvbedmx/khifv.tmp
-
quvbedmx/khu.tmp
-
quvbedmx/kipx.tmp
-
quvbedmx/kjtj.tmp
-
quvbedmx/kknxo.tmp
-
quvbedmx/kkvuqf.tmp
-
quvbedmx/kkvwwl.tmp
-
quvbedmx/kl.tmp
-
quvbedmx/kramdhb.tmp
-
quvbedmx/kramdhl.tmp
-
quvbedmx/krandyr.tmp
-
quvbedmx/krarqkb.tmp
-
quvbedmx/kt.tmp
-
quvbedmx/kutf.tmp
-
quvbedmx/kuvyhsqm.tmp
-
quvbedmx/kyrrm.tmp
-
quvbedmx/kz.tmp
-
quvbedmx/kzk.tmp
-
quvbedmx/l.tmp
-
quvbedmx/leifq.tmp
-
quvbedmx/ljl.tmp
-
quvbedmx/ljyder.tmp
-
quvbedmx/ll.tmp
-
quvbedmx/lmlbmmg.tmp
-
quvbedmx/lnbvtva.tmp
-
quvbedmx/lnbwgil.tmp
-
quvbedmx/lnwiypoc.tmp
-
quvbedmx/lodj.tmp
-
quvbedmx/ltutukz.tmp
-
quvbedmx/lvhxr.tmp
-
quvbedmx/lvygm.tmp
-
quvbedmx/ly.tmp
-
quvbedmx/m.tmp
-
quvbedmx/mcszmyki.tmp
-
quvbedmx/mdhb.tmp
-
quvbedmx/mdhl.tmp
-
quvbedmx/mdhs.tmp
-
quvbedmx/mem.tmp
-
quvbedmx/mifbsa.tmp
-
quvbedmx/misysy.tmp
-
quvbedmx/mlbmmb.tmp
-
quvbedmx/mmbh.tmp
-
quvbedmx/mmg.tmp
-
quvbedmx/mmievi.tmp
-
quvbedmx/mmubp.tmp
-
quvbedmx/mptyj.tmp
-
quvbedmx/mrujpsow.tmp
-
quvbedmx/muyjq.tmp
-
quvbedmx/n.bat
-
quvbedmx/n.tmp
-
quvbedmx/nf.tmp
-
quvbedmx/nkp.bat
-
quvbedmx/npda.tmp
-
quvbedmx/nqwa.tmp
-
quvbedmx/nr.tmp
-
quvbedmx/nt.tmp
-
quvbedmx/ntmb.tmp
-
quvbedmx/nuumlb.tmp
-
quvbedmx/nwikycd.tmp
-
quvbedmx/nwlvjce.tmp
-
quvbedmx/nxlhgzt.tmp
-
quvbedmx/nyvpkc.tmp
-
quvbedmx/o.tmp
-
quvbedmx/obhizk.tmp
-
quvbedmx/od.tmp
-
quvbedmx/oe.tmp
-
quvbedmx/ofz.tmp
-
quvbedmx/ohts.tmp
-
quvbedmx/ollbjc.tmp
-
quvbedmx/olsint.tmp
-
quvbedmx/onamkd.tmp
-
quvbedmx/onamsl.tmp
-
quvbedmx/ors.tmp
-
quvbedmx/orthri.tmp
-
quvbedmx/oszyqy.tmp
-
quvbedmx/otohts.tmp
-
quvbedmx/owehyh.tmp
-
quvbedmx/owucip.tmp
-
quvbedmx/ozuoay.tmp
-
quvbedmx/p.tmp
-
quvbedmx/pbocyf.tmp
-
quvbedmx/pkkbbw.tmp
-
quvbedmx/pnu.tmp
-
quvbedmx/pomxy.tmp
-
quvbedmx/py.tmp
-
quvbedmx/q.tmp
-
quvbedmx/qaeskugr.tmp
-
quvbedmx/qcrawn.tmp
-
quvbedmx/qiw.tmp
-
quvbedmx/qkb.tmp
-
quvbedmx/qkramdhl.tmp
-
quvbedmx/qkramdhs.tmp
-
quvbedmx/qkrarqkb.tmp
-
quvbedmx/qkrpafyy.tmp
-
quvbedmx/ql.tmp
-
quvbedmx/qltumgim.tmp
-
quvbedmx/qltuttol.tmp
-
quvbedmx/qltutukz.tmp
-
quvbedmx/qngl.tmp
-
quvbedmx/qt.tmp
-
quvbedmx/qubbu.tmp
-
quvbedmx/qwtyhl.tmp
-
quvbedmx/r.tmp
-
quvbedmx/rae.tmp
-
quvbedmx/randyr.tmp
-
quvbedmx/rcra.tmp
-
quvbedmx/re.tmp
-
quvbedmx/rhjgbhy.tmp
-
quvbedmx/rljj.tmp
-
quvbedmx/rmyvsbmx.txt
-
quvbedmx/rn.tmp
-
quvbedmx/rpomxy.tmp
-
quvbedmx/rvd.tmp
-
quvbedmx/rvnbmoj.tmp
-
quvbedmx/s.tmp
-
quvbedmx/sfqva.tmp
-
quvbedmx/sieh.tmp
-
quvbedmx/sint.tmp
-
quvbedmx/siu.tmp
-
quvbedmx/sl.tmp
-
quvbedmx/slff.tmp
-
quvbedmx/smg.tmp
-
quvbedmx/sr.tmp
-
quvbedmx/st.tmp
-
quvbedmx/stdcce.tmp
-
quvbedmx/sthevg.tmp
-
quvbedmx/sthkbj.tmp
-
quvbedmx/sv.tmp
-
quvbedmx/sy.tmp
-
quvbedmx/t.tmp
-
quvbedmx/tbi.tmp
-
quvbedmx/tc.tmp
-
quvbedmx/tcxhr.tmp
-
quvbedmx/tk.tmp
-
quvbedmx/tovktd.tmp
-
quvbedmx/ts.tmp
-
quvbedmx/tsvv.tmp
-
quvbedmx/tu.tmp
-
quvbedmx/tukz.tmp
-
quvbedmx/tumgim.tmp
-
quvbedmx/u.tmp
-
quvbedmx/ubgvdfow.tmp
-
quvbedmx/ubobdsoi.tmp
-
quvbedmx/udsa.tmp
-
quvbedmx/uewp.tmp
-
quvbedmx/uh.tmp
-
quvbedmx/uoay.tmp
-
quvbedmx/urkb.tmp
-
quvbedmx/urxt.tmp
-
quvbedmx/utqwymp.tmp
-
quvbedmx/v.tmp
-
quvbedmx/veowehyh.tmp
-
quvbedmx/vhsr.tmp
-
quvbedmx/vjbqm.tmp
-
quvbedmx/vlf.tmp
-
quvbedmx/vn.tmp
-
quvbedmx/vnaqrljj.tmp
-
quvbedmx/vnjuel.tmp
-
quvbedmx/vnwcokbh.tmp
-
quvbedmx/vrbksdvt.tmp
-
quvbedmx/vrclrcrn.tmp
-
quvbedmx/vrsthkbj.tmp
-
quvbedmx/vrsticiy.tmp
-
quvbedmx/vwbw.tmp
-
quvbedmx/vxb.tmp
-
quvbedmx/vxvdwyis.tmp
-
quvbedmx/vzlf.tmp
-
quvbedmx/w.tmp
-
quvbedmx/wbneacir.tmp
-
quvbedmx/wbnuumsi.tmp
-
quvbedmx/we.tmp
-
quvbedmx/wehyh.tmp
-
quvbedmx/wgncwj.tmp
-
quvbedmx/wjoce.tmp
-
quvbedmx/wlvhxr.tmp
-
quvbedmx/wlvwqn.tmp
-
quvbedmx/wm.tmp
-
quvbedmx/wmm.bat
-
quvbedmx/wmn.bat
-
quvbedmx/wp.tmp
-
quvbedmx/wqn.tmp
-
quvbedmx/wyis.tmp
-
quvbedmx/x.tmp
-
quvbedmx/xaqcxtka.tmp
-
quvbedmx/xbcne.tmp
-
quvbedmx/xbgvy.tmp
-
quvbedmx/xbhpueoe.tmp
-
quvbedmx/xfcixat.tmp
-
quvbedmx/xhr.tmp
-
quvbedmx/xmxlod.tmp
-
quvbedmx/xnp.tmp
-
quvbedmx/xta.tmp
-
quvbedmx/xtgig.tmp
-
quvbedmx/xvtsnhu.tmp
-
quvbedmx/xvwl.bat
-
quvbedmx/xy.tmp
-
quvbedmx/y.tmp
-
quvbedmx/yaxhuewp.tmp
-
quvbedmx/yayj.tmp
-
quvbedmx/ybcqq.tmp
-
quvbedmx/yh.tmp
-
quvbedmx/yjdbuzon.tmp
-
quvbedmx/yjegngzj.tmp
-
quvbedmx/yjq.tmp
-
quvbedmx/yrovi.tmp
-
quvbedmx/yvdplodj.tmp
-
quvbedmx/yvdwvtpq.tmp
-
quvbedmx/yvoldhsi.tmp
-
quvbedmx/yvolsint.tmp
-
quvbedmx/yvsheovw.tmp
-
quvbedmx/yvshfetq.tmp
-
quvbedmx/yy.tmp
-
quvbedmx/yykwrve.tmp
-
quvbedmx/z.tmp
-
quvbedmx/zcga.tmp
-
quvbedmx/zcvb.tmp
-
quvbedmx/zhgc.tmp
-
quvbedmx/ztxx.tmp
-
quvbedmx/zyg.tmp
-
readme.txt
-
start.bat