Overview
overview
7Static
static
5JaffaCakes...5c.exe
windows7-x64
7JaffaCakes...5c.exe
windows10-2004-x64
7$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PROGRAMFI...360.js
windows7-x64
3$PROGRAMFI...360.js
windows10-2004-x64
7$PROGRAMFI.../3.bat
windows7-x64
1$PROGRAMFI.../3.bat
windows10-2004-x64
1$PROGRAMFI.../3.vbs
windows7-x64
3$PROGRAMFI.../3.vbs
windows10-2004-x64
3$PROGRAMFI.../q.vbs
windows7-x64
3$PROGRAMFI.../q.vbs
windows10-2004-x64
3$TEMP/SeFa...01.exe
windows7-x64
6$TEMP/SeFa...01.exe
windows10-2004-x64
6�...��.exe
windows7-x64
6�...��.exe
windows10-2004-x64
6Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
28/03/2025, 16:30
Behavioral task
behavioral1
Sample
JaffaCakes118_8ad5786bd8973d15d926e4fd2d4d9a5c.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8ad5786bd8973d15d926e4fd2d4d9a5c.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral9
Sample
$PROGRAMFILES/NetMeeting/360.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PROGRAMFILES/NetMeeting/360.js
Resource
win10v2004-20250314-en
Behavioral task
behavioral11
Sample
$PROGRAMFILES/files/3.bat
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PROGRAMFILES/files/3.bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral13
Sample
$PROGRAMFILES/files/3.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PROGRAMFILES/files/3.vbs
Resource
win10v2004-20250314-en
Behavioral task
behavioral15
Sample
$PROGRAMFILES/files/q.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PROGRAMFILES/files/q.vbs
Resource
win10v2004-20250314-en
Behavioral task
behavioral17
Sample
$TEMP/SeFastInstall3_3201.exe
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
$TEMP/SeFastInstall3_3201.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral19
Sample
֮.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
֮.exe
Resource
win10v2004-20250314-en
General
-
Target
$PROGRAMFILES/files/q.vbs
-
Size
2KB
-
MD5
97af5fe6faf87f3a438f6220e4a67337
-
SHA1
431095968ed4b65f95d548a2aee327dd27a23f2a
-
SHA256
5ec1a99388aff9ac4333f616df25dbb1e9d2c0ee46fa8c2837c7c329b0c24e73
-
SHA512
03f1b50f954af9d2244f7ebc36a27d1334ecacc00ecd307c3aec0c1854357656a6c0d3c2e6f1f081a9d02bd82b3a3490bad52174e58a6104a9aa11e8f973141f
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
112B
MD509d199f776b33aa741813f14220997db
SHA1db1f8b39d8e0c276a66eb1741ac50d1775954f74
SHA2567e03b04fc11a34dc8c526f82bd8c9c072bbc30e1485324fb3a761ec4d515d362
SHA5125fb0fb5e5cb339d771a6da9268bc7fdd3d4c713d06bb1941b9401ebe6095a6d869bdb1a119e27506f558eb2bbb063ee63bb94c21381edd01419e5068db33b588
-
Filesize
111B
MD54f7d19b035aca450d83d0e5029394e1c
SHA11129ff14825f14b59e2f6a536bc497f687827e15
SHA256a1cd94c24fd672ce5142177abe3177ac0a6cbc395a1fb654b2cf8ae7eb0d8a2a
SHA512ae2d1e3209341af7b2e45495eef1bac1e59a2317d5f8424d5122cf54a94ccb4b13544ce608a932ed40232ac6bb63cef8d97d9d17b470ece64910c9b565445326
-
Filesize
112B
MD509c7d93e36ef27366b29169398d14d16
SHA17079dfa642929cc3a10ab7204fac3603d5f797dc
SHA256b06c69c0908783941fbb41ff98b4a1fe9e496045f928c4f62552216a4f9bb63e
SHA512682d4691e12bf6e5e23eabf6e562bfa8d10c10c4da2cfe955deee1e71f10c1db098c500695a3250be59ef15c68e6a03426a3e77e1b20299823aefbd4b4ec925f