Overview
overview
7Static
static
7fc890a53ba...18.exe
windows7-x64
7fc890a53ba...18.exe
windows10-2004-x64
7$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3ConfigHorror.exe
windows7-x64
5ConfigHorror.exe
windows10-2004-x64
5DTDJ_1.exe
windows7-x64
3DTDJ_1.exe
windows10-2004-x64
3Horrorween.exe
windows7-x64
5Horrorween.exe
windows10-2004-x64
5SDL.dll
windows7-x64
3SDL.dll
windows10-2004-x64
3SDL_image.dll
windows7-x64
5SDL_image.dll
windows10-2004-x64
5SDL_net.dll
windows7-x64
3SDL_net.dll
windows10-2004-x64
3fmod.dll
windows7-x64
5fmod.dll
windows10-2004-x64
5jpeg.dll
windows7-x64
5jpeg.dll
windows10-2004-x64
5libpng1.dll
windows7-x64
5libpng1.dll
windows10-2004-x64
5uninst.exe
windows7-x64
7uninst.exe
windows10-2004-x64
7wrapper.dll
windows7-x64
5wrapper.dll
windows10-2004-x64
5Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240910-en -
resource tags
arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system -
submitted
28/09/2024, 14:54
Behavioral task
behavioral1
Sample
fc890a53ba86447138d87315effa2e41_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc890a53ba86447138d87315effa2e41_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
ConfigHorror.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
ConfigHorror.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral13
Sample
DTDJ_1.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
DTDJ_1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Horrorween.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Horrorween.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
SDL.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
SDL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
SDL_image.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
SDL_image.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
SDL_net.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
SDL_net.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
fmod.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
fmod.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
jpeg.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
jpeg.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
libpng1.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
libpng1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
uninst.exe
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
uninst.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
wrapper.dll
Resource
win7-20240903-en
General
-
Target
ConfigHorror.exe
-
Size
215KB
-
MD5
fe379e4250a7139452081b53f628a58c
-
SHA1
cd78e41303e4d694f837cf026d9c737873fbeedd
-
SHA256
2f768f6f249bd3730b18f0e45e44f9c3c9b02f99c03e1464f4465970135332d5
-
SHA512
f432535fe9845cc9d8fc2ec916e0ab9bd1b9c2380dd09cfe93843716d1f14c540aaab48e5249c69344dbef46aba4e8b9246e9832a1efc4572e6b259374e2520b
-
SSDEEP
6144:B2/VJZmVEPqrIcKsEf7UftHkbMUE6zo/Af:GJoVIAEfYWK8sA
Malware Config
Signatures
-
resource yara_rule behavioral12/memory/3552-0-0x0000000000400000-0x0000000000488000-memory.dmp upx behavioral12/memory/3552-2-0x0000000000400000-0x0000000000488000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ConfigHorror.exe