9cafa10ed3a39d3cf672958094f619c64dc0443b0c0d9608f07863ed2fa0054f | Triage

Submit
Reports

Overview

overview

7

Static

static

7

[WPF]JJDow...on.dll

windows7-x64

1

[WPF]JJDow...on.dll

windows10-2004-x64

1

[WPF]JJDown/Dal.dll

windows7-x64

1

[WPF]JJDown/Dal.dll

windows10-2004-x64

1

[WPF]JJDow...PF.exe

windows7-x64

1

[WPF]JJDow...PF.exe

windows10-2004-x64

1

[WPF]JJDow...PF.exe

windows7-x64

1

[WPF]JJDow...PF.exe

windows10-2004-x64

1

[WPF]JJDow...ng.dll

windows7-x64

1

[WPF]JJDow...ng.dll

windows10-2004-x64

1

[WPF]JJDow...PF.exe

windows7-x64

7

[WPF]JJDow...PF.exe

windows10-2004-x64

7

[WPF]JJDow...ll.dll

windows7-x64

1

[WPF]JJDow...ll.dll

windows10-2004-x64

1

[WPF]JJDow...ck.dll

windows7-x64

1

[WPF]JJDow...ck.dll

windows10-2004-x64

1

[WPF]JJDown/Mode.dll

windows7-x64

1

[WPF]JJDown/Mode.dll

windows10-2004-x64

1

[WPF]JJDow...on.dll

windows7-x64

1

[WPF]JJDow...on.dll

windows10-2004-x64

1

[WPF]JJDow...es.dll

windows7-x64

1

[WPF]JJDow...es.dll

windows10-2004-x64

1

[WPF]JJDow...on.dll

windows7-x64

1

[WPF]JJDow...on.dll

windows10-2004-x64

1

[WPF]JJDow...ss.exe

windows7-x64

3

[WPF]JJDow...ss.exe

windows10-2004-x64

3

[WPF]JJDow...ic.dll

windows7-x64

1

[WPF]JJDow...ic.dll

windows10-2004-x64

1

[WPF]JJDow...et.dll

windows7-x64

1

[WPF]JJDow...et.dll

windows10-2004-x64

1

[WPF]JJDow...ta.dll

windows7-x64

1

[WPF]JJDow...ta.dll

windows10-2004-x64

1

Analysis

max time kernel
131s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13-08-2024 13:28

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

[WPF]JJDown/Common.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

[WPF]JJDown/Common.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

[WPF]JJDown/Dal.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

[WPF]JJDown/Dal.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

[WPF]JJDown/ExtractAudioForWPF.exe

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

[WPF]JJDown/ExtractAudioForWPF.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

[WPF]JJDown/ExtractMp4ForWPF.exe

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

[WPF]JJDown/ExtractMp4ForWPF.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

[WPF]JJDown/Gma.QrCodeNet.Encoding.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

[WPF]JJDown/Gma.QrCodeNet.Encoding.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

[WPF]JJDown/JiJiDownForWPF.exe

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

[WPF]JJDown/JiJiDownForWPF.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

[WPF]JJDown/Microsoft.WindowsAPICodePack.Shell.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

[WPF]JJDown/Microsoft.WindowsAPICodePack.Shell.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

[WPF]JJDown/Microsoft.WindowsAPICodePack.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

[WPF]JJDown/Microsoft.WindowsAPICodePack.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

[WPF]JJDown/Mode.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

[WPF]JJDown/Mode.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

[WPF]JJDown/Newtonsoft.Json.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

[WPF]JJDown/Newtonsoft.Json.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

[WPF]JJDown/OrderEXE/IronPython.Modules.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

[WPF]JJDown/OrderEXE/IronPython.Modules.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

[WPF]JJDown/OrderEXE/IronPython.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

[WPF]JJDown/OrderEXE/IronPython.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

[WPF]JJDown/OrderEXE/Kaedei.Danmu2Ass.exe

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

[WPF]JJDown/OrderEXE/Kaedei.Danmu2Ass.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

[WPF]JJDown/OrderEXE/Microsoft.Dynamic.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

[WPF]JJDown/OrderEXE/Microsoft.Dynamic.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

[WPF]JJDown/OrderEXE/Microsoft.Scripting.AspNet.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

[WPF]JJDown/OrderEXE/Microsoft.Scripting.AspNet.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

[WPF]JJDown/OrderEXE/Microsoft.Scripting.Metadata.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

[WPF]JJDown/OrderEXE/Microsoft.Scripting.Metadata.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

[WPF]JJDown/ExtractMp4ForWPF.exe
Size

77KB
MD5

b51b4fda30e016d27ebf5f9afe0bbad4
SHA1

30af761731f433722b8db2dcd423147abe1abcb4
SHA256

b81a9eb7f31c9bfa7d091a317520d79abe44026cda2852ca270ff8e3019d6ab3
SHA512

6537c53d26a1f90dbddfaef805877186bc906317f52d7d258c0df69efb91422e9b15b0928ccfb420485779d6bfb67d116e8a0d8bef625ea4226532d3dd30c218
SSDEEP

384:yJwibCE4IjjT6MaBGBQ5sEf7PLbD1etkzYcExdb8PZ:yCiG+6MaI6DzLlIwYcEzu

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\[WPF]JJDown\ExtractMp4ForWPF.exe
"C:\Users\Admin\AppData\Local\Temp\[WPF]JJDown\ExtractMp4ForWPF.exe"
1⤵
PID:4624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3828,i,6510295916244954942,10164894160290787457,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
1⤵
PID:2152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4624-0-0x00007FF9CDD33000-0x00007FF9CDD35000-memory.dmp

Filesize
8KB

Download
memory/4624-1-0x0000000000E20000-0x0000000000E38000-memory.dmp

Filesize
96KB

Download

© 2018-2024

Terms | Privacy