66aa0c03391ee652cb25383055da60ae88ea9c882cc191112edc45e666c6520e | Triage

Submit
Reports

Overview

overview

Static

static

3

797e48f7d2...18.exe

windows7-x64

797e48f7d2...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

6st41kqx2f.html

windows7-x64

3

6st41kqx2f.html

windows10-2004-x64

3

quickHealt...min.js

windows7-x64

3

quickHealt...min.js

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Analysis

max time kernel
135s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
28-10-2024 11:52

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

797e48f7d26567ae870198f285539b9f_JaffaCakes118.exe

Resource

win7-20241010-en

cerber discovery ransomware

windows7-x64

23 signatures

150 seconds

Behavioral task

behavioral2

Sample

797e48f7d26567ae870198f285539b9f_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win7-20241010-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

6st41kqx2f.html

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

6st41kqx2f.html

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

quickHealthNewsBoxNoProtocol.min.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

quickHealthNewsBoxNoProtocol.min.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

uninst.exe

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

uninst.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

150 seconds

Report Analysis Logs

General

Target

quickHealthNewsBoxNoProtocol.min.js
Size

1KB
MD5

7d20b3b6b350efe4227ecf30f000cc41
SHA1

29cec46ad2771c3f9cc6d44ad56f5d3819ffffa6
SHA256

9f37fbb610dd99aba37dcc32c0de930b638491f8b3865916bfff31fce827393b
SHA512

e31edc14a8eaae85f8a97f2e563980f0445eba0724f6245c0ddeff0c69a29cc5bbbc893eb90495f8dbb4bc47c9a18185e06b71839bf10ac97b1399c6c08cd32d

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\quickHealthNewsBoxNoProtocol.min.js
1⤵
PID:5044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy