Overview
overview
7Static
static
375fed5e909...18.exe
windows7-x64
775fed5e909...18.exe
windows10-2004-x64
7$APPDATA/M...his.js
windows7-x64
3$APPDATA/M...his.js
windows10-2004-x64
3$PLUGINSDI...ad.dll
windows7-x64
3$PLUGINSDI...ad.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$R0.dll
windows7-x64
3$R0.dll
windows10-2004-x64
3$R2/NSIS.L...0_.exe
windows7-x64
1$R2/NSIS.L...0_.exe
windows10-2004-x64
3Updater.exe
windows7-x64
3Updater.exe
windows10-2004-x64
3Analysis
-
max time kernel
15s -
max time network
21s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
26-07-2024 22:29
Static task
static1
Behavioral task
behavioral1
Sample
75fed5e90912b254527a85583845ea22_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75fed5e90912b254527a85583845ea22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$APPDATA/MemoThis/data/adsthis.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$APPDATA/MemoThis/data/adsthis.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InetLoad.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InetLoad.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$R0.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$R0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$R2/NSIS.Library.RegTool.v3.$_0_.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$R2/NSIS.Library.RegTool.v3.$_0_.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Updater.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Updater.exe
Resource
win10v2004-20240709-en
General
-
Target
$APPDATA/MemoThis/data/adsthis.js
-
Size
36KB
-
MD5
ceb2193f2f49244bbe15a083debdb060
-
SHA1
e4b756990d63c81e3259f5cfcec244fa2c9046e9
-
SHA256
64864c922a54cf600660a9faa9ccf6f8a80ce59896674e40d9c2bec0563bd720
-
SHA512
b09d6d8b03cbf9fb9f613f50b48ed08bef3529b76a7f42e21299a906d4174e5806dfaf9d5454fadb6625c6c83e4cb40a8d23bb30f5bdfe2870ce33d8918b2fbd
-
SSDEEP
384:ZXZiE8IXCSJoFm5/UhBxGh1CPXw+FC1Ti2ig/1x/3SiTiZMD1:3eNSJlC5Gh1wXw+8UHg/772Zg
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs