Overview
overview
10Static
static
3ff02090f6f...18.exe
windows7-x64
3ff02090f6f...18.exe
windows10-2004-x64
10$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$TEMP/B3DE...64.exe
windows7-x64
4$TEMP/B3DE...64.exe
windows10-2004-x64
Setup64.exe
windows7-x64
4Setup64.exe
windows10-2004-x64
4uninst.exe
windows7-x64
3uninst.exe
windows10-2004-x64
10$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$TEMP/B3DE...64.exe
windows7-x64
4$TEMP/B3DE...64.exe
windows10-2004-x64
4Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29-09-2024 17:21
Static task
static1
Behavioral task
behavioral1
Sample
ff02090f6ffee0c663e0ffb9af4ead08_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff02090f6ffee0c663e0ffb9af4ead08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$TEMP/B3DE3DBF-7F64-47b5-B25B-9842D2B1A045_Rockey200std/Setup64.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$TEMP/B3DE3DBF-7F64-47b5-B25B-9842D2B1A045_Rockey200std/Setup64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Setup64.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Setup64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
uninst.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
uninst.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
$TEMP/B3DE3DBF-7F64-47b5-B25B-9842D2B1A045_Rockey200std/Setup64.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$TEMP/B3DE3DBF-7F64-47b5-B25B-9842D2B1A045_Rockey200std/Setup64.exe
Resource
win10v2004-20240802-en
General
-
Target
$TEMP/B3DE3DBF-7F64-47b5-B25B-9842D2B1A045_Rockey200std/Setup64.exe
-
Size
489KB
-
MD5
67970f766f50acb40b71adc44a3f942e
-
SHA1
c0208a34bae19787d694cc93ed6bb40d684fc184
-
SHA256
2ad42a3b7fd1fdb5ebfd84680e5c7c7cae4890b7ed985b98bd6f123255500c9e
-
SHA512
278f0e53d0f34d742ef62091abe2301dca3b98216fd7094425cdeb8052d08314dbd520c96735b74dd5c313b033c7f38b3e489048996346168edb635ba7a7d0c9
-
SSDEEP
6144:j+Lw54xlL+rPEoi4i0HdRhHjlQlJ/KYgLyXTfemW8Uf+8hjUBHuehlv4lUKuBHsO:jOw54xl+AjUdYDXTZWLf+8hnehRKzS5
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\Testry5_install_vis_GD_merger.cxx Setup64.exe File created C:\Windows\Testry5_install_vis_GD_merger.cxx.e Setup64.exe