4abc4e174beea2d801bab1f52a202a1adcdc372443e25a2f1875b90f112ff56d

Submit
Reports

Overview

overview

Static

static

JaffaCakes...6d.zip

windows7-x64

JaffaCakes...6d.zip

windows10-2004-x64

08751be484...2d.dll

windows7-x64

08751be484...2d.dll

windows10-2004-x64

0a9f79abd4...51.exe

windows7-x64

0a9f79abd4...51.exe

windows10-2004-x64

0di3x.exe

windows7-x64

0di3x.exe

windows10-2004-x64

104.248.22...A.html

windows7-x64

104.248.22...A.html

windows10-2004-x64

104.248.22...d.html

windows7-x64

104.248.22...d.html

windows10-2004-x64

104.248.22...r.html

windows7-x64

104.248.22...r.html

windows10-2004-x64

104.248.22...g.html

windows7-x64

104.248.22...g.html

windows10-2004-x64

104.248.22...9.html

windows7-x64

104.248.22...9.html

windows10-2004-x64

104.248.22...ain.js

windows7-x64

104.248.22...ain.js

windows10-2004-x64

11.html

windows7-x64

11.html

windows10-2004-x64

12.html

windows7-x64

12.html

windows10-2004-x64

4a30275f14...ab.dll

windows7-x64

4a30275f14...ab.dll

windows10-2004-x64

2019-09-02...10.exe

windows7-x64

2019-09-02...10.exe

windows10-2004-x64

2c01b00772...eb.exe

windows7-x64

2c01b00772...eb.exe

windows10-2004-x64

31.exe

windows7-x64

31.exe

windows10-2004-x64

Analysis

max time kernel
118s
max time network
127s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
24-12-2024 16:52

Sharing

Copy URL

Twitter E-mail

Static task

static1

16 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_4abc4e174beea2d801bab1f52a202a1adcdc372443e25a2f1875b90f112ff56d.zip

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_4abc4e174beea2d801bab1f52a202a1adcdc372443e25a2f1875b90f112ff56d.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

08751be484e1572995ebb085df1c2c6372084d63a64dce7fab28130d79a6ea2d.dll

Resource

win7-20240729-en

zloader main 26.02.2020 botnet discovery persistence trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral4

Sample

08751be484e1572995ebb085df1c2c6372084d63a64dce7fab28130d79a6ea2d.dll

Resource

win10v2004-20241007-en

zloader botnet discovery persistence trojan

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

0a9f79abd48b95544d7e2b6658637d1eb23067a94e10bf06d05c9ecc73cf4b51.exe

Resource

win7-20241010-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

0a9f79abd48b95544d7e2b6658637d1eb23067a94e10bf06d05c9ecc73cf4b51.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

0di3x.exe

Resource

win7-20241023-en

smokeloader backdoor trojan

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

0di3x.exe

Resource

win10v2004-20241007-en

smokeloader backdoor discovery trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral9

Sample

104.248.221.3/systemerror-ie-edge/_data_image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAMA/xhBQAA.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

104.248.221.3/systemerror-ie-edge/_data_image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAMA/xhBQAA.html

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

104.248.221.3/systemerror-ie-edge/dsffddfdfdsawqwq22121sdsd.html

Resource

win7-20240708-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

104.248.221.3/systemerror-ie-edge/dsffddfdfdsawqwq22121sdsd.html

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral13

Sample

104.248.221.3/systemerror-ie-edge/img/blur.html

Resource

win7-20241010-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

104.248.221.3/systemerror-ie-edge/img/blur.html

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral15

Sample

104.248.221.3/systemerror-ie-edge/img/headshot-bg.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

104.248.221.3/systemerror-ie-edge/img/headshot-bg.html

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral17

Sample

104.248.221.3/systemerror-ie-edge/indexe2c9.html

Resource

win7-20240708-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral18

Sample

104.248.221.3/systemerror-ie-edge/indexe2c9.html

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

104.248.221.3/systemerror-ie-edge/js/main.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

104.248.221.3/systemerror-ie-edge/js/main.js

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

11.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

11.html

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral23

Sample

12.html

Resource

win7-20241023-en

discovery ransomware

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral24

Sample

12.html

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral25

Sample

4a30275f14f80c6e11d5a253d7d004eda98651010e0aa47f744cf4105d1676ab.dll

Resource

win7-20240903-en

zloader googleaktualizacija googleaktualizacija1 botnet discovery trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

4a30275f14f80c6e11d5a253d7d004eda98651010e0aa47f744cf4105d1676ab.dll

Resource

win10v2004-20241007-en

zloader googleaktualizacija googleaktualizacija1 botnet discovery trojan

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

2019-09-02_22-41-10.exe

Resource

win7-20241010-en

smokeloader backdoor discovery trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

2019-09-02_22-41-10.exe

Resource

win10v2004-20241007-en

smokeloader backdoor discovery trojan

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral29

Sample

2c01b007729230c415420ad641ad92eb.exe

Resource

win7-20240903-en

hawkeye collection discovery keylogger persistence spyware stealer trojan

windows7-x64

18 signatures

150 seconds

Behavioral task

behavioral30

Sample

2c01b007729230c415420ad641ad92eb.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral31

Sample

31.exe

Resource

win7-20240903-en

agenttesla formbook gozi qakbot raccoon 86920224 spx129 1590734339 w9z agilenet banker cryptone defense_evasion discovery execution impact keylogger packer ransomware rat rezer0 rm3 spyware stealer trojan

windows7-x64

31 signatures

150 seconds

Behavioral task

behavioral32

Sample

31.exe

Resource

win10v2004-20241007-en

agenttesla danabot dharma formbook gozi 86920224 app w9z agilenet banker botnet cryptone defense_evasion discovery evasion execution impact keylogger packer persistence ransomware rat rezer0 rm3 spyware stealer trojan

windows10-2004-x64

48 signatures

150 seconds

Report Analysis Logs

General

Target

JaffaCakes118_4abc4e174beea2d801bab1f52a202a1adcdc372443e25a2f1875b90f112ff56d.zip
Size

221.1MB
MD5

0c1df79aedd19bad104f962cfa9495a2
SHA1

62f9b3c0e8d3f29663c2bafde2602d7cda044fcc
SHA256

4abc4e174beea2d801bab1f52a202a1adcdc372443e25a2f1875b90f112ff56d
SHA512

b1f89e94914584186da5f6cd2755b35c134402f66f1c0d6dea22feafe84fe5b96f6e46460edce3c1c5a8ce0d0f766f6921b8c196e97172fcdbeeb0057b6f36db
SSDEEP

3145728:rdm8ZSmWUMbGIngwOqslykYmO6PCtzCtFRU/mvL91UppmkSKmfLeUuO5jPOL0aj0:fSmhMbGqylyzs/imvL91UYLfLd1PHp

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2340	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2340	7zFM.exe
Token: 35	2340	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2340	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_4abc4e174beea2d801bab1f52a202a1adcdc372443e25a2f1875b90f112ff56d.zip"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2340

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads