Overview
overview
7Static
static
7171f66ba3c...18.exe
windows7-x64
7171f66ba3c...18.exe
windows10-2004-x64
7$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...te.dll
windows7-x64
3$PLUGINSDI...te.dll
windows10-2004-x64
3$PLUGINSDI...om.dll
windows7-x64
5$PLUGINSDI...om.dll
windows10-2004-x64
5$PLUGINSDIR/xml.dll
windows7-x64
3$PLUGINSDIR/xml.dll
windows10-2004-x64
3EDSDK.dll
windows7-x64
3EDSDK.dll
windows10-2004-x64
3EdsImage.dll
windows7-x64
3EdsImage.dll
windows10-2004-x64
3Help/en/ca...l.html
windows7-x64
3Help/en/ca...l.html
windows10-2004-x64
3Help/en/devices.html
windows7-x64
3Help/en/devices.html
windows10-2004-x64
1Help/en/fi...s.html
windows7-x64
3Help/en/fi...s.html
windows10-2004-x64
3Help/en/ge...g.html
windows7-x64
3Help/en/ge...g.html
windows10-2004-x64
3Help/en/import.html
windows7-x64
3Help/en/import.html
windows10-2004-x64
3Help/en/im...s.html
windows7-x64
3Help/en/im...s.html
windows10-2004-x64
3Analysis
-
max time kernel
129s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/10/2024, 09:28
Behavioral task
behavioral1
Sample
171f66ba3c071dbe1126d5f5fc3b6013_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
171f66ba3c071dbe1126d5f5fc3b6013_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DcryptDll.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DcryptDll.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/locate.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/locate.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsRandom.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsRandom.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/xml.dll
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/xml.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
EDSDK.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
EDSDK.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
EdsImage.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
EdsImage.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Help/en/camcontrol.html
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Help/en/camcontrol.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Help/en/devices.html
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Help/en/devices.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Help/en/firststeps.html
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Help/en/firststeps.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Help/en/geocoding.html
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
Help/en/geocoding.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Help/en/import.html
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Help/en/import.html
Resource
win10v2004-20240910-en
Behavioral task
behavioral31
Sample
Help/en/importsettings.html
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Help/en/importsettings.html
Resource
win10v2004-20240802-en
General
-
Target
Help/en/devices.html
-
Size
1KB
-
MD5
aa8996ec92f3cfbf541a74322c5db868
-
SHA1
93dce858124bab8cd1d599e30dba39b94b02c1bc
-
SHA256
46bdc3d6ccd4c536bf4c6d83e6a77efeb3119147f917442afc3e9587f2cb5067
-
SHA512
6b4bc947e30f4a220305284394a79f1e749162d5060279638dbc4b8f5974477319bfa5cb5992f5b39f908f29765bf4862456b8064fe61bebe825a7f3bb790ac3
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\Help\en\devices.html1⤵PID:4964
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=3832,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:11⤵PID:2532
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=4396,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:11⤵PID:3956
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5408,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:11⤵PID:212
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5536,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:81⤵PID:2312
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --field-trial-handle=5564,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:81⤵PID:4948
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=3796,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:11⤵PID:1220
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --field-trial-handle=5776,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:81⤵PID:2268
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=6580,i,5469445176230119590,7931734017267321834,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:81⤵PID:1408