Overview
overview
8Static
static
3aa54f68350...18.exe
windows7-x64
7aa54f68350...18.exe
windows10-2004-x64
7$PLUGINSDI...er.exe
windows7-x64
7$PLUGINSDI...er.exe
windows10-2004-x64
8$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$SYSDIR/Sk...05.dll
windows7-x64
3$SYSDIR/Sk...05.dll
windows10-2004-x64
3LimeWire A...ol.exe
windows7-x64
3LimeWire A...ol.exe
windows10-2004-x64
3UpdateApp.exe
windows7-x64
3UpdateApp.exe
windows10-2004-x64
3gdiplus.dll
windows7-x64
3gdiplus.dll
windows10-2004-x64
3mfc80.dll
windows7-x64
3mfc80.dll
windows10-2004-x64
3packet.dll
windows7-x64
3packet.dll
windows10-2004-x64
3Analysis
-
max time kernel
138s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19-08-2024 08:43
Static task
static1
Behavioral task
behavioral1
Sample
aa54f68350b8a0bac01e02bbe3805ae3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aa54f68350b8a0bac01e02bbe3805ae3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Gossiper.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Gossiper.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$SYSDIR/SkinCrafter3_vs2005.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
$SYSDIR/SkinCrafter3_vs2005.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
LimeWire Acceleration Tool.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
LimeWire Acceleration Tool.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
UpdateApp.exe
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
UpdateApp.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
gdiplus.dll
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
gdiplus.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
mfc80.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
mfc80.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
packet.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
packet.dll
Resource
win10v2004-20240802-en
General
-
Target
LimeWire Acceleration Tool.exe
-
Size
727KB
-
MD5
e0e5aae904f39bd4ce07e4c24f7feba1
-
SHA1
c50faab1fa2a3dc70db2f3b9b4298fbe84c879c0
-
SHA256
00c04a73b72a2992e5fa3a698af7a31325a68014222e8c17d48987a76f4e2d9c
-
SHA512
29acd5a70377e14d95ddee4afd2f0962d5cb63bbe5059de1f0bc12f580b0e9368a47ba65a1a1794238268e761967996631773009c980b92fcb3e90c552ffc429
-
SSDEEP
12288:3ogFl7toUTulioIdmVTnQzoaQ804Ifbqjb83OK/Ncz/3a1/km+8J:3ogxyIdmVaoaN7qOsOK/NczW/kgJ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language LimeWire Acceleration Tool.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3860 LimeWire Acceleration Tool.exe 3860 LimeWire Acceleration Tool.exe