Overview
overview
7Static
static
394b0815466...18.exe
windows7-x64
794b0815466...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$TEMP/Toolbar.exe
windows7-x64
7$TEMP/Toolbar.exe
windows10-2004-x64
7content/ctoolbar.js
windows7-x64
3content/ctoolbar.js
windows10-2004-x64
3components...rch.js
windows7-x64
3components...rch.js
windows10-2004-x64
3components...bar.js
windows7-x64
3components...bar.js
windows10-2004-x64
3components...rt.dll
windows7-x64
3components...rt.dll
windows10-2004-x64
3components...ax.dll
windows7-x64
3components...ax.dll
windows10-2004-x64
3components...icy.js
windows7-x64
3components...icy.js
windows10-2004-x64
3lib/xpcom.js
windows7-x64
3lib/xpcom.js
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
13/08/2024, 20:52
Static task
static1
Behavioral task
behavioral1
Sample
94b0815466932f60d4276ab68f040c8a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94b0815466932f60d4276ab68f040c8a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$TEMP/Toolbar.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$TEMP/Toolbar.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
content/ctoolbar.js
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
content/ctoolbar.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
components/ConduitAutoCompleteSearch.js
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
components/ConduitAutoCompleteSearch.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
components/ConduitToolbar.js
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
components/ConduitToolbar.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
components/FFExternalAlert.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
components/FFExternalAlert.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
components/npmozax.dll
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
components/npmozax.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
components/nsAxSecurityPolicy.js
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
components/nsAxSecurityPolicy.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
lib/xpcom.js
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
lib/xpcom.js
Resource
win10v2004-20240802-en
General
-
Target
lib/xpcom.js
-
Size
354KB
-
MD5
e5a3dd32ff8ccdbe510ebe44719828df
-
SHA1
2f4e652d7e9c5952e4dc0d1ba6431468ab4c338a
-
SHA256
f9ab4a9ffe0d686be5de1e58da196052249abfc5d46d428603416af0d216cfbc
-
SHA512
935fd30aec5afd828acc303658aa056c002c2cc26df863d753c1c0e9186b4d6695edd47de98ab848e9cb7a209f5fb6a106c88c0c5e1c56f61f3a65005ce4f4b4
-
SSDEEP
6144:fu1sGt8AmtskG9pBTXgCHwwhdjYcK7/rny+UIuB:21sGt8AjW77y+UIuB
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs