Overview
overview
5Static
static
5084b70ee38...18.exe
windows7-x64
3084b70ee38...18.exe
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3e$EXEFILE.exe
windows7-x64
3e$EXEFILE.exe
windows10-2004-x64
1wget.exe
windows7-x64
5wget.exe
windows10-2004-x64
5Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02-10-2024 01:41
Behavioral task
behavioral1
Sample
084b70ee384e1f7e77117153095f388e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
084b70ee384e1f7e77117153095f388e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
e$EXEFILE.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
e$EXEFILE.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
wget.exe
Resource
win7-20240903-en
General
-
Target
e$EXEFILE.exe
-
Size
348KB
-
MD5
6e8f93c2c57da370bfd61b8569654c2d
-
SHA1
831f2d452e4d3c69603b2ba7bdffbb7b0aaf4e5e
-
SHA256
7df11e563a24619bb1aa41c697b2893410c3337d4b43733da99f2ef3a3c892e3
-
SHA512
748ef10a82a27d984c951acb7d65badabee3541f7f30558afa9780477973834cc79277c43910534f3338dac738a23a272d0111d492740083aabdd260b08f68c4
-
SSDEEP
6144:pJezkTdplZ/UwGnzUbW5fd4r5FdhP5SWiGdi5r7q+Kiw:rezkTXlZ/UwCUb155SWiblD
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1352 e$EXEFILE.exe 1352 e$EXEFILE.exe