9cafa10ed3a39d3cf672958094f619c64dc0443b0c0d9608f07863ed2fa0054f | Triage

Submit
Reports

Overview

overview

7

Static

static

7

[WPF]JJDow...on.dll

windows7-x64

1

[WPF]JJDow...on.dll

windows10-2004-x64

1

[WPF]JJDown/Dal.dll

windows7-x64

1

[WPF]JJDown/Dal.dll

windows10-2004-x64

1

[WPF]JJDow...PF.exe

windows7-x64

1

[WPF]JJDow...PF.exe

windows10-2004-x64

1

[WPF]JJDow...PF.exe

windows7-x64

1

[WPF]JJDow...PF.exe

windows10-2004-x64

1

[WPF]JJDow...ng.dll

windows7-x64

1

[WPF]JJDow...ng.dll

windows10-2004-x64

1

[WPF]JJDow...PF.exe

windows7-x64

7

[WPF]JJDow...PF.exe

windows10-2004-x64

7

[WPF]JJDow...ll.dll

windows7-x64

1

[WPF]JJDow...ll.dll

windows10-2004-x64

1

[WPF]JJDow...ck.dll

windows7-x64

1

[WPF]JJDow...ck.dll

windows10-2004-x64

1

[WPF]JJDown/Mode.dll

windows7-x64

1

[WPF]JJDown/Mode.dll

windows10-2004-x64

1

[WPF]JJDow...on.dll

windows7-x64

1

[WPF]JJDow...on.dll

windows10-2004-x64

1

[WPF]JJDow...es.dll

windows7-x64

1

[WPF]JJDow...es.dll

windows10-2004-x64

1

[WPF]JJDow...on.dll

windows7-x64

1

[WPF]JJDow...on.dll

windows10-2004-x64

1

[WPF]JJDow...ss.exe

windows7-x64

3

[WPF]JJDow...ss.exe

windows10-2004-x64

3

[WPF]JJDow...ic.dll

windows7-x64

1

[WPF]JJDow...ic.dll

windows10-2004-x64

1

[WPF]JJDow...et.dll

windows7-x64

1

[WPF]JJDow...et.dll

windows10-2004-x64

1

[WPF]JJDow...ta.dll

windows7-x64

1

[WPF]JJDow...ta.dll

windows10-2004-x64

1

Analysis

max time kernel
145s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13-08-2024 13:28

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

[WPF]JJDown/Common.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

[WPF]JJDown/Common.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

[WPF]JJDown/Dal.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

[WPF]JJDown/Dal.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

[WPF]JJDown/ExtractAudioForWPF.exe

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

[WPF]JJDown/ExtractAudioForWPF.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

[WPF]JJDown/ExtractMp4ForWPF.exe

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

[WPF]JJDown/ExtractMp4ForWPF.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

[WPF]JJDown/Gma.QrCodeNet.Encoding.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

[WPF]JJDown/Gma.QrCodeNet.Encoding.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

[WPF]JJDown/JiJiDownForWPF.exe

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

[WPF]JJDown/JiJiDownForWPF.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

[WPF]JJDown/Microsoft.WindowsAPICodePack.Shell.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

[WPF]JJDown/Microsoft.WindowsAPICodePack.Shell.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

[WPF]JJDown/Microsoft.WindowsAPICodePack.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

[WPF]JJDown/Microsoft.WindowsAPICodePack.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

[WPF]JJDown/Mode.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

[WPF]JJDown/Mode.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

[WPF]JJDown/Newtonsoft.Json.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

[WPF]JJDown/Newtonsoft.Json.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

[WPF]JJDown/OrderEXE/IronPython.Modules.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

[WPF]JJDown/OrderEXE/IronPython.Modules.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

[WPF]JJDown/OrderEXE/IronPython.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

[WPF]JJDown/OrderEXE/IronPython.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

[WPF]JJDown/OrderEXE/Kaedei.Danmu2Ass.exe

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

[WPF]JJDown/OrderEXE/Kaedei.Danmu2Ass.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

[WPF]JJDown/OrderEXE/Microsoft.Dynamic.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

[WPF]JJDown/OrderEXE/Microsoft.Dynamic.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

[WPF]JJDown/OrderEXE/Microsoft.Scripting.AspNet.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

[WPF]JJDown/OrderEXE/Microsoft.Scripting.AspNet.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

[WPF]JJDown/OrderEXE/Microsoft.Scripting.Metadata.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

[WPF]JJDown/OrderEXE/Microsoft.Scripting.Metadata.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

[WPF]JJDown/ExtractAudioForWPF.exe
Size

27KB
MD5

1ab142624beac7de4f0f597ca77a5d48
SHA1

33936b21d645783ca3caccf526912bdc4eefecee
SHA256

cd7c50e1688b4cc76bfa84962fcf522811d7b5660b26f1e254ccbc78da083e99
SHA512

a0de94d2f1613403070eb5b2eff35c72d019a1800df5ef01ef759b7bd719e77d80ca455480ac13a239f45b9f3996bd109e2a0ecfddb51143a949caceb14e0b5f
SSDEEP

192:/nu/lII7mFIj3ydO1aESW346+kzYcECOdb8PZ:al/4Ij3yw1aB44tkzYcExdb8PZ

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\[WPF]JJDown\ExtractAudioForWPF.exe
"C:\Users\Admin\AppData\Local\Temp\[WPF]JJDown\ExtractAudioForWPF.exe"
1⤵
PID:4780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4780-0-0x00007FFE91C93000-0x00007FFE91C95000-memory.dmp

Filesize
8KB

Download
memory/4780-1-0x0000000000290000-0x000000000029C000-memory.dmp

Filesize
48KB

Download

© 2018-2024

Terms | Privacy