Overview
overview
6Static
static
37f1d7836a2...18.exe
windows7-x64
37f1d7836a2...18.exe
windows10-2004-x64
3$PLUGINSDI...le.dll
windows7-x64
3$PLUGINSDI...le.dll
windows10-2004-x64
$PLUGINSDIR/PPAP.exe
windows7-x64
3$PLUGINSDIR/PPAP.exe
windows10-2004-x64
3$PLUGINSDI...og.dll
windows7-x64
3$PLUGINSDI...og.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...nt.dll
windows7-x64
6$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...le.dll
windows7-x64
3$PLUGINSDI...le.dll
windows10-2004-x64
$PLUGINSDI...er.exe
windows7-x64
3$PLUGINSDI...er.exe
windows10-2004-x64
3$PLUGINSDI...me.dll
windows7-x64
3$PLUGINSDI...me.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDIR/pnsis.dll
windows7-x64
3$PLUGINSDIR/pnsis.dll
windows10-2004-x64
3$PLUGINSDI...n2.dll
windows7-x64
3$PLUGINSDI...n2.dll
windows10-2004-x64
3$PLUGINSDIR/ppp.dll
windows7-x64
3$PLUGINSDIR/ppp.dll
windows10-2004-x64
3$PLUGINSDI...e3.dll
windows7-x64
3$PLUGINSDI...e3.dll
windows10-2004-x64
3$PLUGINSDIR/time.dll
windows7-x64
$PLUGINSDIR/time.dll
windows10-2004-x64
3$PLUGINSDIR/uilib.dll
windows7-x64
3$PLUGINSDIR/uilib.dll
windows10-2004-x64
3General
-
Target
7f1d7836a2de1559325cdccd0db0e453_JaffaCakes118
-
Size
1.5MB
-
Sample
241030-n432casgpg
-
MD5
7f1d7836a2de1559325cdccd0db0e453
-
SHA1
b95fab52d999051614afa951fe1adb751a566467
-
SHA256
37b2eacbebdf6160c444d3bf802e5fb0b812a7d0a68d29a5ba122263acae9c8a
-
SHA512
d8765ebf86c840407e6a6235ec413f1e2482b13c2696aad54b3b6b15cdc960ceba45b75112949b6c600dee3227721c26e2c6616a93d3a9fb6a0c8a3d32fe5308
-
SSDEEP
49152:rHeOqb4CYXEdPp26SbCt6CL97osOZxOncvA:DeOqb4ZE1sZbCtdL97oKQA
Static task
static1
Behavioral task
behavioral1
Sample
7f1d7836a2de1559325cdccd0db0e453_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7f1d7836a2de1559325cdccd0db0e453_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/MngModule.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/MngModule.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/PPAP.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/PPAP.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/PPInstallLog.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/PPInstallLog.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/TipsClient.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/TipsClient.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/admodule.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/admodule.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/crashreporter.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/crashreporter.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/mframe.dll
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/mframe.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/pnsis.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/pnsis.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/pplugin2.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/pplugin2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/ppp.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/ppp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/sqlite3.dll
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/sqlite3.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/time.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/time.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/uilib.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/uilib.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
7f1d7836a2de1559325cdccd0db0e453_JaffaCakes118
-
Size
1.5MB
-
MD5
7f1d7836a2de1559325cdccd0db0e453
-
SHA1
b95fab52d999051614afa951fe1adb751a566467
-
SHA256
37b2eacbebdf6160c444d3bf802e5fb0b812a7d0a68d29a5ba122263acae9c8a
-
SHA512
d8765ebf86c840407e6a6235ec413f1e2482b13c2696aad54b3b6b15cdc960ceba45b75112949b6c600dee3227721c26e2c6616a93d3a9fb6a0c8a3d32fe5308
-
SSDEEP
49152:rHeOqb4CYXEdPp26SbCt6CL97osOZxOncvA:DeOqb4ZE1sZbCtdL97oKQA
Score3/10 -
-
-
Target
$PLUGINSDIR/MngModule.dll
-
Size
862KB
-
MD5
992ef262f488bd71005d04644b128788
-
SHA1
6a35e4ba677cc9e03fac85983bd968ab8862b16c
-
SHA256
ca89fab589e51e74468860dec0a63eaf4bb9a80a8444fde7783f43ec7b96916b
-
SHA512
6e619c4a2b382b2f7e9a9aab5cc9578caced894092cec9abd96fa9958a0506042afc463e1a767eece3115ed5db62d207b84df6dc919a84330cecf9309cb59578
-
SSDEEP
12288:fQD1kl1ZVQQNaA13/NY9+pQwqDeIGvKb2yuYNemSIWGJjrirC6B5LgZku:o+l/Njp/bTyuYFWGJjrir3Fu
Score3/10 -
-
-
Target
$PLUGINSDIR/PPAP.exe
-
Size
181KB
-
MD5
ecf05fb40bb1eedda1ba50280ee91c74
-
SHA1
a9b160c78cdb26e2c7f8a8a172dfbca832281df7
-
SHA256
3c90f9e0159b911dd9559d86b80ebf9fc2a83908993c4cffacdc5d4ddcb9baf5
-
SHA512
8c630615ec1041f4e6f88fa744529a564e6a7442a3666015ae519d68cc61904500d932f621af4b8d231a32e81d32bb1754cc5947e61093a87ae92bd0008ae7a5
-
SSDEEP
3072:iktGuFdoU712zneJxEpiEIII1IIaVkbAGAdzB3Yt/nGbMQ:7roU52znAEgEIII1IIaVBGM3ZAQ
Score3/10 -
-
-
Target
$PLUGINSDIR/PPInstallLog.dll
-
Size
41KB
-
MD5
a04d44787b28d37b4334c184ea4faae8
-
SHA1
47a5038f2fc45841420a89f08eefd35191aa1fe7
-
SHA256
34f0eb6f3b7deda82929fba6993eb27cd26d0b791be8031ce0b4729a7dc9dd46
-
SHA512
a529e5c412dce90f34e13a185e81b757adf140447167b310d056d2b380873683e5b6681f5810be7d1194cfdd64eda25b87a1a5aae70ed4e48be5aa64acbd5346
-
SSDEEP
768:oCIMnU6AUW1qDyaoKg6V86jJaJy+mW3jLWQbCo:lIMSHP6C6j4JqWTaECo
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score3/10 -
-
-
Target
$PLUGINSDIR/TipsClient.dll
-
Size
237KB
-
MD5
25853e8bd3e283e15024d1111535ede7
-
SHA1
5b56e1dea924520b6c61ec09113c33fa3db573a4
-
SHA256
ccbce22f01208cc8fc96de789ab9fedefc851f588cd4c1fbd6d9edc7ac2f4eb5
-
SHA512
5bfa0e6bed05f1ab79ee97d1bd9bf1d48ba3d263a44e538d005af820c41c659eb112a4f19152e0841301fbd8b9618e8f353fe672df88b66e45c4719784202144
-
SSDEEP
3072:G4CrgXFGPASJR81rXwRtTgvK8SvP4N6MPuFjpChe8WgoqILjWjpWyI9Se/tNWrLL:yg1TwsS8HUdjpChSpGje/tNyykwbC1
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
-
-
Target
$PLUGINSDIR/admodule.dll
-
Size
812KB
-
MD5
a256337aedd10bfe85aa8d0cc759c4b1
-
SHA1
292012487cd89842964712e1ad26e7dfb2c1fcb1
-
SHA256
e2c24c63ac4da0e34a253c3cf8d6ec31da39740376fe2e87e52ba0f32c450640
-
SHA512
250666689c156809dae72648e99d0a9abdb105375044c956d6c50e4107dce236d95a7925611566f8963b7bb0e956631aff9cce65695f1b7e493cfd4c849dab72
-
SSDEEP
12288:01uRtBrct5O/dyANBseR1+bQE5NyH8/uUIid7vV+4KCaEovvV:3gturIGjUIid7rKvvXV
Score3/10 -
-
-
Target
$PLUGINSDIR/crashreporter.exe
-
Size
193KB
-
MD5
ef3540f822902149f6519f5cbd06dc1b
-
SHA1
fd2fa2e58d4f895ed0ae3260f101b37fc0eaef48
-
SHA256
b2d19487e25e991b1d7e14e332b051a73805c9c4e4069a35af73b73af15d9a56
-
SHA512
58072f705b6aaf2ec7a9fb6c2f0501a27a92c6d8874666fccc907be5988a5c1a28978a0439f8c5467eeac3c5b71ffb02c360d47b06db2a76eb38839922087e80
-
SSDEEP
3072:atu1sefJ/nIBxioCtOA2P+BHLutd4iCc9:atMfJPIBBCymFutdWc9
Score3/10 -
-
-
Target
$PLUGINSDIR/mframe.dll
-
Size
609KB
-
MD5
cfca286051452ee4ade71c64021424e9
-
SHA1
80bdc7dd1a5b478b2e86d6d99674794cc75d4f2e
-
SHA256
1f3c0af59c46dc9a04bbc86ec5e363622d87118dd32c0782bcbbd964086aedd4
-
SHA512
8a2e88bccfe0fbdef29d9bcc7c7dc5e7451f32aa1e75a5592546f7b7013d581b5cebec7c80565ed6debea4e9a346e869cd728761cbbba3efac703167b2664cdb
-
SSDEEP
12288:c+rCmGX/1n7/IWWVMjhsVTgpiNq5Vvk8fNpq92VH5xCZ:dmTpnC19yHPCZ
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score3/10 -
-
-
Target
$PLUGINSDIR/pnsis.dll
-
Size
72KB
-
MD5
dde7cd3719145ecf3c89d2a1e79ca1f3
-
SHA1
92802c38f88c4d57f0b1153b04b4de43af4adcde
-
SHA256
c930819a0f64879fe3a96c606da4be49613693a43b9b1060dc870bec7b3ab47a
-
SHA512
dd67858919fea31f0d4df0c012dc9605fc68bb7512924fee04ae41528d02f8f7ddfd32949841b676735a9d3d81f7dcb455854f20467a4a40ee9f48babd5bee5a
-
SSDEEP
1536:b3wED/xETX1V6iCKVADJ1ON2LqbaxkO7ln:l/xm6NKqD2E/xZ7ln
Score3/10 -
-
-
Target
$PLUGINSDIR/pplugin2.dll
-
Size
241KB
-
MD5
f62f6814c814b1edd41401c50135bcde
-
SHA1
dbd994d95ca44d9f672149b3780b0ee32df3f404
-
SHA256
6f060604bd162cadd83e75eeb0285056aa389bdacf1a4c906a81e63328ddd650
-
SHA512
a2be347d3f2c6fb0c55bdc22b881450db9e3f1c7fdfcd47245122dcdfe7c77d923d36be6aadfccc4a6e327078e9f2d109d65cc7ddd4436a899dd61328f03cb35
-
SSDEEP
6144:6245KU2DX/X1f6M5YmRbhpzpVCbj3iepPV1lcoMYp6IoZnYcvR+7RnwK:695KU2DX/X1fl5YmRbhpzpVCJPV1lcTk
Score3/10 -
-
-
Target
$PLUGINSDIR/ppp.dll
-
Size
305KB
-
MD5
19e50d2c1b3d9cb095508ba3edabf19d
-
SHA1
ddaa2469659fe7c110bde2c93470d4b4ccceaa39
-
SHA256
b75d1af08423e2987f90e734116e76bacfdea7632405df1b8f36af8f98d6a943
-
SHA512
75666665a231a929eb535e5c6038d155828842725fbecfe03d43267ce540b805dadadf60d4cefeed27f98b7bdd266578a6353adcb2755133216116b3eb4e6876
-
SSDEEP
6144:HYP8I4qtrSxR9RRnBMywPNVgMds+mUAZYIaT4cZJn:HY0I4uSxR9RRnnwPN3s+m+HBJn
Score3/10 -
-
-
Target
$PLUGINSDIR/sqlite3.dll
-
Size
221KB
-
MD5
dfc60b6676d0af6ea908be2c38e296a7
-
SHA1
4295206a36365940d8b4af9eb66b0ac15a3b0938
-
SHA256
1e144773525ce37e69a4ef522bf22a29c0b9f1a55f9dc194e49b5cb9675c3d4d
-
SHA512
4210de93f29cb6e8e87d90488e83a8744c3e9d83ac83520ba07307d881953b466845fa6e59190afe6d48971c7c29c470306362169857efde95b7d042424c99b2
-
SSDEEP
3072:PjGpZjFTcQODoxoxon1f8wL6rB8JBp2yF2+gcVgU3N9oAjAH3fHhCeVlLPF4dzIh:La6o1fPp2yvgEN9oTXfBCM5PSdUGa
Score3/10 -
-
-
Target
$PLUGINSDIR/time.dll
-
Size
10KB
-
MD5
38977533750fe69979b2c2ac801f96e6
-
SHA1
74643c30cda909e649722ed0c7f267903558e92a
-
SHA256
b4a95a455e53372c59f91bc1b5fb9e5c8e4a10a506fa04aaf7be27048b30ae35
-
SHA512
e17069395ad4a17e24f7cd3c532670d40244bd5ae3887c82e3b2e4a68c250cd55e2d8b329d6ff0e2d758955ab7470534e6307779e49fe331c1fd2242ea73fd53
-
SSDEEP
192:oNcwTweFbs9t2n2Sgiga65/aHdaGZavaJIYX4Hw2:oNcwBFg22SEw47CPU
Score3/10 -
-
-
Target
$PLUGINSDIR/uilib.dll
-
Size
680KB
-
MD5
aff1a930d109f758a4bab03930963dfb
-
SHA1
864acf405c4617c922b328490e7ed2d6379de59d
-
SHA256
5baea08c387595bff9b644c381c6108f6d436ac13ce47fce67c2803adbc87952
-
SHA512
24ef00b2dec273f72afaa828604608acee404458750993ab84cece971b095e5008ad29a930cf57659e9f05df6399fdacdf20fdc1e9438f12b7fb09a331fb750b
-
SSDEEP
12288:yJ7JrzL7XGxZzOa4nFbwyKLrpapsWDpzG8sIRxA3tV2tjStKbM9KKiTTwiKkPqYv:ek2sWzz4tV2FS4bFhTWIB6a
Score3/10 -