Overview
overview
7Static
static
3ea8f6dfab4...18.exe
windows7-x64
7ea8f6dfab4...18.exe
windows10-2004-x64
7$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...lp.dll
windows7-x64
3$PLUGINSDI...lp.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$TEMP/Detect64.exe
windows7-x64
1$TEMP/Detect64.exe
windows10-2004-x64
3ClearOptions.exe
windows7-x64
3ClearOptions.exe
windows10-2004-x64
3DarkWave.chm
windows7-x64
1DarkWave.chm
windows10-2004-x64
1uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7x64/DarkWa...io.exe
windows7-x64
1x64/DarkWa...io.exe
windows10-2004-x64
1x64/PlugIn...es.dll
windows7-x64
1x64/PlugIn...es.dll
windows10-2004-x64
1x86/DarkWa...io.exe
windows7-x64
3x86/DarkWa...io.exe
windows10-2004-x64
3x86/OpenAsio.dll
windows7-x64
3x86/OpenAsio.dll
windows10-2004-x64
3x86/PlugIn...es.dll
windows7-x64
3x86/PlugIn...es.dll
windows10-2004-x64
3Analysis
-
max time kernel
94s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2024, 04:10
Static task
static1
Behavioral task
behavioral1
Sample
ea8f6dfab4cf68f39195d6f4bab22a5a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea8f6dfab4cf68f39195d6f4bab22a5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/OCSetupHlp.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$TEMP/Detect64.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$TEMP/Detect64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
ClearOptions.exe
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
ClearOptions.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
DarkWave.chm
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
DarkWave.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
uninst.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
uninst.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
x64/DarkWave-Studio.exe
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
x64/DarkWave-Studio.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
x64/PlugIns/ES-CoreMachines.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
x64/PlugIns/ES-CoreMachines.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
x86/DarkWave-Studio.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
x86/DarkWave-Studio.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
x86/OpenAsio.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
x86/OpenAsio.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
x86/PlugIns/ES-CoreMachines.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
x86/PlugIns/ES-CoreMachines.dll
Resource
win10v2004-20240802-en
General
-
Target
DarkWave.chm
-
Size
19KB
-
MD5
28a9af166fd24775fc407b7fe1c2b68a
-
SHA1
3b1825f615506593d2257927ae8d856300536ce3
-
SHA256
71aae12b2adb1cb4cb6c45de4d5e0c7fa3062ae1ea570001ce608f45c8907f78
-
SHA512
fee13f484009716e3379b0097d66d462616ba59f1dfcc45f73bcfa4f3c4c413d9e79eb98d6aa39a7533ebfa379a4615b976a84130b6bed764ad07a845338b496
-
SSDEEP
192:6KiSc57hdme+cRRGHNk7j32I9Wd1GYuiVtgjMPHHAqDbcuO46eJvvnPblYg9tinG:6KithsTq3FQ1G1iDxbjP9JnnDb9oyl
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3548 hh.exe 3548 hh.exe