Overview
overview
10Static
static
30535498d42...18.exe
windows7-x64
100535498d42...18.exe
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3NsResize.dll
windows7-x64
3NsResize.dll
windows10-2004-x64
3dbtoepub
ubuntu-18.04-amd64
1dbtoepub
debian-9-armhf
1dbtoepub
debian-9-mips
1dbtoepub
debian-9-mipsel
1Analysis
-
max time kernel
2s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
01-10-2024 09:13
Static task
static1
Behavioral task
behavioral1
Sample
0535498d42c6e270db089f64b34f8d02_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0535498d42c6e270db089f64b34f8d02_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
NsResize.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
NsResize.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
dbtoepub
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
dbtoepub
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral9
Sample
dbtoepub
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral10
Sample
dbtoepub
Resource
debian9-mipsel-20240729-en
General
-
Target
dbtoepub
-
Size
2KB
-
MD5
74bd5642c624b226b994687574b6da99
-
SHA1
3963f102d24966bf751df6bc0835ca3ce65f59aa
-
SHA256
1b0b349c04198dd85bd420dbb5260d6c24d6b8a3b1d23b5cf1b40a4aea6badd3
-
SHA512
634b29c156e05cb9c4c2b8fb9d39f91a6a79f6b6f213974e9235ab44592d71c893316c1a06ff9be9adde4c143d0a4c5b88bfc3de7f97a9755bb6bd7638e3a416
Malware Config
Signatures
Processes
-
/tmp/dbtoepub/tmp/dbtoepub1⤵PID:698
-
/usr/local/sbin/rubyruby /tmp/dbtoepub1⤵PID:698
-
/usr/local/bin/rubyruby /tmp/dbtoepub1⤵PID:698
-
/usr/sbin/rubyruby /tmp/dbtoepub1⤵PID:698
-
/usr/bin/rubyruby /tmp/dbtoepub1⤵PID:698
-
/sbin/rubyruby /tmp/dbtoepub1⤵PID:698
-
/bin/rubyruby /tmp/dbtoepub1⤵PID:698