Overview
overview
7Static
static
72fa188fa02...18.exe
windows7-x64
72fa188fa02...18.exe
windows10-2004-x64
7$PLUGINSDI...rol.js
windows7-x64
3$PLUGINSDI...rol.js
windows10-2004-x64
3$PLUGINSDI...all.js
windows7-x64
3$PLUGINSDI...all.js
windows10-2004-x64
3$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...oxy.js
windows7-x64
3$PLUGINSDI...oxy.js
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows7-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...ist.js
windows7-x64
3$PLUGINSDI...ist.js
windows10-2004-x64
3$PLUGINSDI...ads.js
windows7-x64
3$PLUGINSDI...ads.js
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...nit.js
windows7-x64
3$PLUGINSDI...nit.js
windows10-2004-x64
3$PLUGINSDI...ge.dll
windows7-x64
3$PLUGINSDI...ge.dll
windows10-2004-x64
3$PLUGINSDI...n12.js
windows7-x64
3$PLUGINSDI...n12.js
windows10-2004-x64
3$PLUGINSDI...ime.js
windows7-x64
3$PLUGINSDI...ime.js
windows10-2004-x64
3$PLUGINSDI...ket.js
windows7-x64
3$PLUGINSDI...ket.js
windows10-2004-x64
3$PLUGINSDI...ftp.js
windows7-x64
3$PLUGINSDI...ftp.js
windows10-2004-x64
3$PLUGINSDI...ttp.js
windows7-x64
3$PLUGINSDI...ttp.js
windows10-2004-x64
3General
-
Target
2fa188fa0208a8d3754da91dfa2b6633_JaffaCakes118
-
Size
740KB
-
Sample
241009-mp5e7avfpe
-
MD5
2fa188fa0208a8d3754da91dfa2b6633
-
SHA1
afbf709abc4a3d7e18ff1760978b684f40fd0ea6
-
SHA256
d74913b5145d6adc7305dcf49aac75e090013577c2ef2ae811bf28cdb895b87a
-
SHA512
e60861a836dfd61c3efefe5af2052c0b279b107d2a53909631f6bc294a7befb8cfd058d0ee56811d8c4b244a7599802a75e9e71c74127ebb81b61b06ae50dc7b
-
SSDEEP
12288:rxpJTRe2ox2XK8arRJjOvsWRBsu1ZZKPrqLELFQvCU/DLz:lpNR9ox2NErSNCPrXQaUbH
Behavioral task
behavioral1
Sample
2fa188fa0208a8d3754da91dfa2b6633_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fa188fa0208a8d3754da91dfa2b6633_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BrowserControl.js
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BrowserControl.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/BundleInstall.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/BundleInstall.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/CallbackProxy.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/CallbackProxy.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/CustomBrandingURL.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/CustomBrandingURL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/DownloadList.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/DownloadList.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/Downloads.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/Downloads.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/GuiInit.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/GuiInit.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2fa188fa0208a8d3754da91dfa2b6633_JaffaCakes118
-
Size
740KB
-
MD5
2fa188fa0208a8d3754da91dfa2b6633
-
SHA1
afbf709abc4a3d7e18ff1760978b684f40fd0ea6
-
SHA256
d74913b5145d6adc7305dcf49aac75e090013577c2ef2ae811bf28cdb895b87a
-
SHA512
e60861a836dfd61c3efefe5af2052c0b279b107d2a53909631f6bc294a7befb8cfd058d0ee56811d8c4b244a7599802a75e9e71c74127ebb81b61b06ae50dc7b
-
SSDEEP
12288:rxpJTRe2ox2XK8arRJjOvsWRBsu1ZZKPrqLELFQvCU/DLz:lpNR9ox2NErSNCPrXQaUbH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/BrowserControl.lua
-
Size
4KB
-
MD5
0758c4987fa7e4b0418059b764e8852f
-
SHA1
090bc19f211655796b1e7153cf60862fa382e87e
-
SHA256
4b28476a7984d6057dec94f19f63a678ea24dae9772d9b371177a6834782dbaf
-
SHA512
985e37d47932d9b4c576db3108d893a9a0b04475d026731251bb76e83a28485f9079371a2a79851713e639ad1192e098a503589872c9e5226067c157f41d2a7a
-
SSDEEP
96:YcPFcSnAqMP6HAjidEJNMIwLzm1BRjNsWhPEEPNeCmhLCzgtP:YcNcSA7PNMjzYtblV3mc0tP
Score3/10 -
-
-
Target
$PLUGINSDIR/BundleInstall.lua
-
Size
10KB
-
MD5
9ee5c77f84034100bbe49fd933d27ed1
-
SHA1
fdb931a006f8a466ca60cd451e2cd91a93eda430
-
SHA256
bc823831af0b57d4cd9736c12beff594eb6b1ee5ef24a96f43b215a111d5ec3a
-
SHA512
5f178ddd9a413aab2c365aa1401e8a7ce94733ed5292c6bbf644c9be0870f5ae6b306e60292443695fad1f6a778dcab0ef5c06128a682439e3be3493e372ae80
-
SSDEEP
192:wPRXwtq5QCSvwJrhOCYI8LIdz0zSV2Gmvz6p51QC:ayZCMwRhxYI+IdQJGmYgC
Score3/10 -
-
-
Target
$PLUGINSDIR/ButtonEvent.dll
-
Size
4KB
-
MD5
fad9d09fc0267e8513b8628e767b2604
-
SHA1
bea76a7621c07b30ed90bedef4d608a5b9e15300
-
SHA256
5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
-
SHA512
b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
Score3/10 -
-
-
Target
$PLUGINSDIR/CallbackProxy.lua
-
Size
5KB
-
MD5
412e9a95b337edd51aa3ab78f55d1c2d
-
SHA1
abe08ab1394eca8fea5b9b80543aed81b4ae52f9
-
SHA256
cf8d7d1866b230881f8b70b992c24fdd4dc3f52c7a761be1211e3d5371a48a9e
-
SHA512
f393433319a86d976f7607d4b2f4d65f6753a9b854b9e1a60d7c327e5911bff8ed2ad7224e29b4e245ab2646141fd528bedeba97a57c7753eb2a53cf46f52454
-
SSDEEP
96:JqO1UsvH0vChw1x6PtVz4MAlK9Ru/Jq1QGstqiMSJMq89L9RAJR16/gC:JqObvH0vChDPDJ9RP2GsDFJH89ZRAJQ
Score3/10 -
-
-
Target
$PLUGINSDIR/CustomBrandingURL.dll
-
Size
5KB
-
MD5
e4c1b74859c17671ffe1c0602fd56b44
-
SHA1
15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1
-
SHA256
2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156
-
SHA512
9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925
-
SSDEEP
48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH
Score3/10 -
-
-
Target
$PLUGINSDIR/DownloadList.lua
-
Size
11KB
-
MD5
2346a37153681e56093aed5f7b033314
-
SHA1
f93250b18c02d8fcced3c8eec8c22bb61a93eb11
-
SHA256
23c0f82e93132f7e79f5c08575257e68560a4ce0289c5d48fee3a4508b73df3d
-
SHA512
6b313839f08411ffd33af1f01aebd6756dbb99080c380a21b480d0e5dda643460c7d03f4b33ad44226fa677de2c56a92c3b744a010d400b30a63b5ba0f1a25e7
-
SSDEEP
192:nxzEiapMCIJxGlQ6Pdrq84V4WUJsQO3ylSSorDGz:nxJMpkUlQodr+V4pvOKSlW
Score3/10 -
-
-
Target
$PLUGINSDIR/Downloads.lua
-
Size
9KB
-
MD5
c1573fe0e36f3cbc82ca19c76f81fac1
-
SHA1
84904ddd3592eb3eed9c62dedfdde45870716aae
-
SHA256
68472d9b7aeb69480ef0a85e5e1106132209c09f2f17b964629c92ab52b12b9e
-
SHA512
09bbeca379715f2b633df14243c8548602d082f2252c1cc6785e832b3fe88a5617ec105374db45f088436fe7481d3c4828de70ecf334f3173ffc1306ef5b4d69
-
SSDEEP
192:ZZTESfvMF2yJWxrpGclIRjQEAeekUrAgYfYpV0xU89bKuL+x31602gE3VJ4o9mrc:ZZTEGkEE4r/WlQEne7rdYfYpaxU89bF/
Score3/10 -
-
-
Target
$PLUGINSDIR/FloatingProgress.dll
-
Size
25KB
-
MD5
1dcfa038b79b3df456a3c584d96b639c
-
SHA1
27b9e4cfc15ebe9ff69d65b9c46a2448c4fdbb17
-
SHA256
9278f0566af5574a4ba02e6a6a4752182070119f28247e1248a7ff6d9e1526b3
-
SHA512
0b6a06f4ee89a59fadd1714dc7bacdc77319d10c62f4d3b2aa33c6e163b0f35f75ec15f7d16bb944a3ff4167f387a61978923491151ea6ed55d167f47e9f03ce
-
SSDEEP
192:2h7WPcep+D7ifqTyFDoUjSFWbY3Lf+25meJVOuN+Sx10mvmWc4b6A:2INq8fc7fV8C+I2mw4b6A
Score3/10 -
-
-
Target
$PLUGINSDIR/GuiInit.lua
-
Size
113KB
-
MD5
b0e6bd81a681b26f149afb2ef99d29d2
-
SHA1
bee99c82976181e67700d2b89002a10d0f84d458
-
SHA256
13ab29ccb8dbf1ff85e2c01973871c949b8939e5b43ad878430ca1761889e67d
-
SHA512
846f0cbab4f7ca1a5dbc3529a6917526eb08730e56bcef9a54f6bf3a259e5ad38752c76bef0eb15c740a6ef2df0aa5d26144fe6b505eda0f86100e9a1654ff66
-
SSDEEP
1536:W7oRRZjeoO85/077Q2BAHmTh3b+xLz24KNr1Lyi2D76xoa:JpKoO8WbPy1La
Score3/10 -
-
-
Target
$PLUGINSDIR/LuaBridge.dll
-
Size
38KB
-
MD5
663e3fbb8b2950143a0c72e408b8d1fe
-
SHA1
624cdbc316cbad83ab5ac694ef4031aa554cddac
-
SHA256
6d7475590ff1188df4808509ae664893b03d0440104cbb9f423df7ebccbce85a
-
SHA512
1e9bf899fedadb939245bdb3805f77d3f3999de1f21517ed9c2d7cb1ef549c91c58de24c4a38c880ba19d07dd85803a8cc7b868736139a5ce929e2a6e14020a0
-
SSDEEP
768:Q9Tkuh2ZwJYOwKXCWoD4nvKbrTiv/aDsoU2qeQ4pXDHWsW:QOu0Z0YOwKvvYGv/0sIW
Score3/10 -
-
-
Target
$PLUGINSDIR/LuaSocket/lua/ltn12.lua
-
Size
8KB
-
MD5
e440044afe6c761507a996b5b45ab0f9
-
SHA1
ef772c758fd5d6098b41375f35ac26f3963cc306
-
SHA256
b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
-
SHA512
8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
-
SSDEEP
192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
Score3/10 -
-
-
Target
$PLUGINSDIR/LuaSocket/lua/mime.lua
-
Size
2KB
-
MD5
4bfdaaab9014fe129bc6388fd5687c8f
-
SHA1
2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
-
SHA256
e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
-
SHA512
3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
Score3/10 -
-
-
Target
$PLUGINSDIR/LuaSocket/lua/socket.lua
-
Size
4KB
-
MD5
74dbe1060e91112e1c21ef9870b4a587
-
SHA1
86afb6aecb0a8387ffa5dead1cc9808332f94310
-
SHA256
15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
-
SHA512
73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
-
SSDEEP
96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
Score3/10 -
-
-
Target
$PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
-
Size
9KB
-
MD5
7309f4294ae4abb4f6ae657b2a98d488
-
SHA1
327d143e9f7a1835a58fdaf569a8f7a937fcf2c0
-
SHA256
9ba5df91091c46f0ffe0a93ace577a4833c92cbec1742113d0a2da9e568f9a10
-
SHA512
a44d2603af63828e8a0b1fbc7455305c616e5bae4a351b429e7e94a6aa7e4d6425f69d57d6a44ba87ee5d29accfc01c1f3ff288652120ff8f08a66543d357895
-
SSDEEP
192:GsooRaLonJfMxBs6gZO2zMAcTcGZqxOU6iOeBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7U6iOeBRkfYtW
Score3/10 -
-
-
Target
$PLUGINSDIR/LuaSocket/lua/socket/http.lua
-
Size
12KB
-
MD5
61a2a779da46e835338f1ad1efad1717
-
SHA1
091d49262b7c1d1f4a89655673710f6d8a37baf0
-
SHA256
68fd4bc835da98dd1d5509333f8cc8861133c9439d3de879bf29a96de462940a
-
SHA512
657594b8ea1a2584c45d85df6c57c5ed43bfae2ece2db534e52ad66a8c7f8c1f85f99bc9329fd8d88a06b6fd2b9121b8e359dbdfd532da0e26d94352a055ec14
-
SSDEEP
384:x7/thyc+f7zLajrZhVoaOt2yyViz/vcGwkD:F/thyc+f7zyoaOt2yqiz/LvD
Score3/10 -