Overview
overview
7Static
static
3da4cc78571...18.exe
windows7-x64
7da4cc78571...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3AutomaticUpdate.exe
windows7-x64
3AutomaticUpdate.exe
windows10-2004-x64
3NetworkAdm...or.exe
windows7-x64
3NetworkAdm...or.exe
windows10-2004-x64
3Plugins/Agent32.exe
windows7-x64
3Plugins/Agent32.exe
windows10-2004-x64
3Plugins/Agent64.exe
windows7-x64
1Plugins/Agent64.exe
windows10-2004-x64
1Plugins/Ag...ld.exe
windows7-x64
3Plugins/Ag...ld.exe
windows10-2004-x64
3Plugins/Ag...32.dll
windows7-x64
3Plugins/Ag...32.dll
windows10-2004-x64
3Plugins/Ag...64.dll
windows7-x64
1Plugins/Ag...64.dll
windows10-2004-x64
1Plugins/Ag...32.dll
windows7-x64
3Plugins/Ag...32.dll
windows10-2004-x64
3Plugins/Ag...64.dll
windows7-x64
1Plugins/Ag...64.dll
windows10-2004-x64
1Plugins/Ag...gs.exe
windows7-x64
3Plugins/Ag...gs.exe
windows10-2004-x64
3Plugins/Ag...rd.exe
windows7-x64
3Plugins/Ag...rd.exe
windows10-2004-x64
3Plugins/AgentTray.exe
windows7-x64
3Plugins/AgentTray.exe
windows10-2004-x64
3Plugins/Ag...ll.exe
windows7-x64
6Plugins/Ag...ll.exe
windows10-2004-x64
6Plugins/Ch...pt.vbs
windows7-x64
1Plugins/Ch...pt.vbs
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11-09-2024 11:58
Static task
static1
Behavioral task
behavioral1
Sample
da4cc7857119f58f14ebad6849c905ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da4cc7857119f58f14ebad6849c905ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
AutomaticUpdate.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
AutomaticUpdate.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
NetworkAdministrator.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
NetworkAdministrator.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Plugins/Agent32.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Plugins/Agent32.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Plugins/Agent64.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Plugins/Agent64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Plugins/AgentBuild.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Plugins/AgentBuild.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Plugins/AgentCAD32.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Plugins/AgentCAD32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Plugins/AgentCAD64.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Plugins/AgentCAD64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Plugins/AgentHook32.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Plugins/AgentHook32.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral21
Sample
Plugins/AgentHook64.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Plugins/AgentHook64.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Plugins/AgentSettings.exe
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
Plugins/AgentSettings.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Plugins/AgentSetupWizard.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Plugins/AgentSetupWizard.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Plugins/AgentTray.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Plugins/AgentTray.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Plugins/AgentUninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Plugins/AgentUninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Plugins/Change Network Configuration/Script.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Plugins/Change Network Configuration/Script.vbs
Resource
win10v2004-20240802-en
General
-
Target
Plugins/AgentCAD64.dll
-
Size
192KB
-
MD5
86035915327ea78abc7661ebbe231b5d
-
SHA1
870712c0e9aadb4920ad058a80eebb1f8b12fbbc
-
SHA256
4a5f1a1c20051d3b2e30ecb63731b3391f105bd5532006e6c893c967644f38a0
-
SHA512
bf3983dd8a422b3f8ed094fcefaaa9db0b63302c8992674dc3a7da4aed2ec029796f1fc1286c099d177a15a9568bdecd42ce5544ee9d11326c2aee83094ed016
-
SSDEEP
6144:6fQ+S4yXmDDJDbctjjbzKUNLa/ZHzcTiUTBgJpndmD:6fxQSJDbmiUT2Ji
Malware Config
Signatures
-
System policy modification 1 TTPs 2 IoCs
description ioc Process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SoftwareSASGeneration = "3" rundll32.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SoftwareSASGeneration = "0" rundll32.exe