Overview
overview
1Static
static
1DVL-2.exe
windows7-x64
DVL-2.exe
windows10-2004-x64
COM2TXT.com
windows7-x64
COM2TXT.com
windows10-2004-x64
DAMN.bat
windows7-x64
1DAMN.bat
windows10-2004-x64
1BAT$MF31.bat
windows7-x64
1BAT$MF31.bat
windows10-2004-x64
1BAT$MF32.bat
windows7-x64
1BAT$MF32.bat
windows10-2004-x64
1BAT$MF33.bat
windows7-x64
1BAT$MF33.bat
windows10-2004-x64
1FRIEND3.exe
windows7-x64
FRIEND3.exe
windows10-2004-x64
OVER.exe
windows7-x64
OVER.exe
windows10-2004-x64
RAW.exe
windows7-x64
RAW.exe
windows10-2004-x64
ARHIWORM.exe
windows7-x64
ARHIWORM.exe
windows10-2004-x64
COMMAND.com
windows7-x64
COMMAND.com
windows10-2004-x64
SAVESET.exe
windows7-x64
SAVESET.exe
windows10-2004-x64
T_BOMB/DESTR.com
windows7-x64
T_BOMB/DESTR.com
windows10-2004-x64
T_BOMB/EXEC.com
windows7-x64
T_BOMB/EXEC.com
windows10-2004-x64
T_BOMB/GOROSCOP.exe
windows7-x64
T_BOMB/GOROSCOP.exe
windows10-2004-x64
T_BOMB/PATCH.exe
windows7-x64
T_BOMB/PATCH.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
DVL-2.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
DVL-2.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
COM2TXT.com
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
COM2TXT.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
DAMN.bat
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
DAMN.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
BAT$MF31.bat
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
BAT$MF31.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
BAT$MF32.bat
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
BAT$MF32.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
BAT$MF33.bat
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
BAT$MF33.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
FRIEND3.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
FRIEND3.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
OVER.exe
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
OVER.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
RAW.exe
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
RAW.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
ARHIWORM.exe
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
ARHIWORM.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
COMMAND.com
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
COMMAND.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
SAVESET.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
SAVESET.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
T_BOMB/DESTR.com
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
T_BOMB/DESTR.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
T_BOMB/EXEC.com
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
T_BOMB/EXEC.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
T_BOMB/GOROSCOP.exe
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
T_BOMB/GOROSCOP.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
T_BOMB/PATCH.exe
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
T_BOMB/PATCH.exe
Resource
win10v2004-20240802-en
General
-
Target
bc3881e3b87ac4ce7bd91ce8c42ab810_JaffaCakes118
-
Size
212KB
-
MD5
bc3881e3b87ac4ce7bd91ce8c42ab810
-
SHA1
b0403e8370f5891e16d2b77ff46b52bc93128a7c
-
SHA256
262b963c47d8e1c677a98f44d15a061934832a43e54926e1c0c87aa09f72d93f
-
SHA512
519d8a507e9e290fd1ae2efd17d2486345abe3b0166d9e65775de8df0dc2e08851e89af1df6104ae43f4fbb8d30824c3f9bbe97ce54cc9095378e7c4c803f4b3
-
SSDEEP
6144:n6alFMr8rnJHi/0ju2vYHvIxjcne/mhVHjkbEzGjTGjxLs:n6aUCJHi/F2vYP4/mb1JjxLs
Malware Config
Signatures
Files
-
bc3881e3b87ac4ce7bd91ce8c42ab810_JaffaCakes118.zip
-
DVL-2.EXE
-
DVL2-01.ANS
-
DVL2-02.ANS
-
DVL2-03.ANS
-
DVL2-03A.ANS
-
DVL2-03A.ZIP.zip
-
COM2TXT.COM
-
DAMN.ASM
-
DAMN.BAT
-
DAMN.DAT
-
DVL2-03B.ANS
-
DVL2-04.ANS
-
DVL2-04A.ZIP.zip
-
BAT$MF31.BAT
-
BAT$MF32.BAT
-
BAT$MF33.BAT
-
DVL2-05.ANS
-
DVL2-05A.ZIP.zip
-
FRIEND3.EXE
-
FRIEND3.PAS
-
DVL2-06.ANS
-
DVL2-06A.ZIP.zip
-
OVER.EXE
-
OVER.PAS
-
DVL2-07.ANS
-
DVL2-07A.ZIP.zip
-
RAW.EXE
-
RAW.PAS
-
DVL2-08.ANS
-
DVL2-08A.ZIP.zip
-
ARHIWORM.EXE
-
ARHIWORM.PAS
-
DVL2-09.ANS
-
DVL2-09A.ZIP.zip
-
COMMAND.COM
-
SAVESET.EXE
-
SAVESET.PAS
-
DVL2-10.ANS
-
DVL2-10A.ZIP.zip
-
T_BOMB/DESCRIPT.ION
-
T_BOMB/DESTR.ASM
-
T_BOMB/DESTR.COM
-
T_BOMB/EXEC.ASM
-
T_BOMB/EXEC.COM
-
T_BOMB/GOROSCOP.EXE
-
T_BOMB/PATCH.EXE
-
T_BOMB/PATCH.PAS
-
T_BOMB/SH.PAS
-
T_BOMB/WIN.COM
-
T_BOMB/WIN1.COM
-
DVL2-11.ANS
-
DVL2-11A.ANS
-
DVL2-11B.ANS
-
DVL2-12.ANS
-
DVL2-12A.ZIP.zip
-
DVL2-13.ANS
-
DVL2-13A.ZIP.zip
-
DVL2-14.ANS
-
DVL2-14A.ZIP.zip
-
DVL2-15.ANS
-
DVL2-15A.ANS
-
DVL2-15B.ANS
-
DVL2-16.ANS
-
DVL2-17.ANS
-
DVL2-18.ANS
-
DVL2-19.ANS
-
DVL2-20.ANS
-
DVL2-NFO.EXE
-
FILE_ID.DIZ
-
UP981024.ZIP.zip