Overview
overview
7Static
static
3d34f7280b2...18.exe
windows7-x64
7d34f7280b2...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3CoCode.dll
windows7-x64
3CoCode.dll
windows10-2004-x64
3SDL.dll
windows7-x64
3SDL.dll
windows10-2004-x64
3SsmpVlogLayerComm.dll
windows7-x64
3SsmpVlogLayerComm.dll
windows10-2004-x64
3UFDeMux.dll
windows7-x64
3UFDeMux.dll
windows10-2004-x64
3UFSource.dll
windows7-x64
3UFSource.dll
windows10-2004-x64
3UPnPNat.dll
windows7-x64
3UPnPNat.dll
windows10-2004-x64
3UUPlayer.exe
windows7-x64
3UUPlayer.exe
windows10-2004-x64
3UUPlayer.dll
windows7-x64
3UUPlayer.dll
windows10-2004-x64
3UUSeeMediaCenter.exe
windows7-x64
4UUSeeMediaCenter.exe
windows10-2004-x64
4UUUpgrade.exe
windows7-x64
3UUUpgrade.exe
windows10-2004-x64
3UUUpgrade.dll
windows7-x64
3UUUpgrade.dll
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
08-09-2024 02:15
Static task
static1
Behavioral task
behavioral1
Sample
d34f7280b2130f75e72f9af59808931c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d34f7280b2130f75e72f9af59808931c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
CoCode.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
CoCode.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
SDL.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
SDL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
SsmpVlogLayerComm.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
SsmpVlogLayerComm.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
UFDeMux.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
UFDeMux.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
UFSource.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
UFSource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
UPnPNat.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
UPnPNat.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
UUPlayer.exe
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
UUPlayer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
UUPlayer.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
UUPlayer.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
UUSeeMediaCenter.exe
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
UUSeeMediaCenter.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
UUUpgrade.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
UUUpgrade.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
UUUpgrade.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
UUUpgrade.dll
Resource
win10v2004-20240802-en
General
-
Target
UUSeeMediaCenter.exe
-
Size
857KB
-
MD5
e9dc23b31ce0b677eab95bd26412f4e2
-
SHA1
d2fc5059ff5b894aa4f88a9230561b1da9fe4869
-
SHA256
93068f8f75ebf55efa75ae2678e0e83c1cbb1a8368bc59706fa991e8e07cb945
-
SHA512
c3612af35a0689032c499caa641d817a9c9388dd6f3ce0f490865792b7bd41d255d4145f85f96f0ddba8dcfaa1aeef6b961f4150a60aef0c5bb8d0c9e045d254
-
SSDEEP
12288:5esZsEd44Fd1BPZk8uHCq+bRS1KVWIldc8pNqUcSU/KqCM89TeOzQlXkYwizbf:isxVZfus8gWIzjNqB/KqCM89TeOzQP
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\struct~.ini UUSeeMediaCenter.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UUSeeMediaCenter.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4032 UUSeeMediaCenter.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4032 UUSeeMediaCenter.exe -
Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe 4032 UUSeeMediaCenter.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\UUSeeMediaCenter.exe"C:\Users\Admin\AppData\Local\Temp\UUSeeMediaCenter.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4032
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD512f9325ed13880c23dea4768f2f4a88f
SHA1c1368a3ae0938f8dbf73b7b0640e9274aafa113d
SHA256f36d0f30fb8a3aa082a876db5b5b7cc9bbe36a34f0e0923d270473ed2657f675
SHA512a247a258c5697dc540713c76a76e424cca6cda31a3bf6632d7da047208bacc2d8dcc65f0264c27ef1ad4cfb71cf59e612b452ea76d8673a03fcfbb3c169c47ab
-
Filesize
204B
MD5ed0b379229602df087441a94b41a16e1
SHA12facf512948ae2414ebf61e2d142fb2e671dce21
SHA2567bde990763131a82c81fb111f735f08aef111c0f235553734f3656372f5626c2
SHA512ecf323e59a669bbfff52d1b426a2bffcd19bcd1b84b6fa185c6d2a9166b66404f4119388ce56a7516241f1b87a3695ba929a6ef7baa784d72d0d4388efe52164