Overview
overview
7Static
static
3jaffacakes...32.exe
windows10-2004-x64
7jaffacakes...32.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3axvlc.dll
windows10-2004-x64
3axvlc.dll
windows11-ltsc_2024-x64
3http/flash.html
windows10-2004-x64
3http/flash.html
windows11-ltsc_2024-x64
3http/index.html
windows10-2004-x64
3http/index.html
windows11-ltsc_2024-x64
3http/js/functions.js
windows10-2004-x64
3http/js/functions.js
windows11-ltsc_2024-x64
3http/js/mosaic.js
windows10-2004-x64
3http/js/mosaic.js
windows11-ltsc_2024-x64
3http/js/vlm.js
windows10-2004-x64
3http/js/vlm.js
windows11-ltsc_2024-x64
3http/mosaic.html
windows10-2004-x64
3http/mosaic.html
windows11-ltsc_2024-x64
3http/old/a...e.html
windows10-2004-x64
3http/old/a...e.html
windows11-ltsc_2024-x64
3http/old/a...s.html
windows10-2004-x64
3http/old/a...s.html
windows11-ltsc_2024-x64
3http/old/a...x.html
windows10-2004-x64
3http/old/a...x.html
windows11-ltsc_2024-x64
3http/old/index.html
windows10-2004-x64
3http/old/index.html
windows11-ltsc_2024-x64
3http/old/info.html
windows10-2004-x64
3http/old/info.html
windows11-ltsc_2024-x64
3http/old/v...t.html
windows10-2004-x64
3http/old/v...t.html
windows11-ltsc_2024-x64
3General
- Target jaffacakes118_vlc-0.9.8a-win32.exe
- Size 15.6MB
- Sample260910-ebzzjsyves
- SHA256 30c504fa6b5390b798c95717720a99dbeab87740ac85932812eb94a371428685
- MD5 d18c0bc161a35d2b60640ae34c57c16a
- SHA1 15e6bfe3dda037e6229be279db93fbb778b80ce2
- SHA512 4fed16276b892d948365e8242af56e5d694b75002247c0d1f9b984319a29f9c9ec5e40a03287916045ed6746546c28852e4206dfd3291e1f793eb0479ee9a0d9
- SSDEEP 393216:sm/5GuErmzqriQMAQoPMgdnKw2k4qPUmSMsO5PXJEXG5:B/HEo8itAvPMgbZMTMsOPEXa
- TLSH T105F63353F8484482F2DCA7704F4AC75941626634A7A8B9A3AB173EF47DB3591ED183CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_vlc-0.9.8a-win32.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
jaffacakes118_vlc-0.9.8a-win32.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
axvlc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
axvlc.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
http/flash.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
http/flash.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
http/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
http/index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
http/js/functions.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
http/js/functions.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
http/js/mosaic.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
http/js/mosaic.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
http/js/vlm.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
http/js/vlm.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
http/mosaic.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
http/mosaic.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
http/old/admin/browse.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
http/old/admin/browse.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
http/old/admin/dboxfiles.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
http/old/admin/dboxfiles.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
http/old/admin/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
http/old/admin/index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
http/old/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
http/old/index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
http/old/info.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
http/old/info.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
http/old/vlm/edit.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
http/old/vlm/edit.html
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target jaffacakes118_vlc-0.9.8a-win32.exe
- Size 15.6MB
- SHA256 30c504fa6b5390b798c95717720a99dbeab87740ac85932812eb94a371428685
- MD5 d18c0bc161a35d2b60640ae34c57c16a
- SHA1 15e6bfe3dda037e6229be279db93fbb778b80ce2
- SHA512 4fed16276b892d948365e8242af56e5d694b75002247c0d1f9b984319a29f9c9ec5e40a03287916045ed6746546c28852e4206dfd3291e1f793eb0479ee9a0d9
- SSDEEP 393216:sm/5GuErmzqriQMAQoPMgdnKw2k4qPUmSMsO5PXJEXG5:B/HEo8itAvPMgbZMTMsOPEXa
- TLSH T105F63353F8484482F2DCA7704F4AC75941626634A7A8B9A3AB173EF47DB3591ED183CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 17KB
- SHA256 f9a6f49778db1887e4cc96729fa3758693d281bed70174adf55fb322e3fedc00
- MD5 d43d84790c559b71f8e64fd0ef7e0692
- SHA1 296e09f4887fdda25cc854119df736f739b330c8
- SHA512 bceda184719fc91ab047698df0c2999c58d062b25e390cce92d408a53dd29c123467cde901d5152773a646095717aeb0c181ee0f857f8ff803271ac9b5e75dfc
- SSDEEP 192:Zi0AiuaA7BBBVll9g2tbpfELj4+bjEk3RAq9naEyOz3xxhxaHxJ6fxSUsvkk:MaAXtftlff2EuRR3BEn6JSVv
- TLSH T19A72F6CEA7616C73D96703343016662276B09872B07995C26BC67F8CB8E0676F24C39F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LangDLL.dll
- Size 6KB
- SHA256 d3cc40ce2eb465be5f9c58f5196c567533ebe6452399193c781210755c5a414f
- MD5 8699f12218b88c83e8f74228ce56535e
- SHA1 6de86ab9f74451d0fc1654c83ebce4dd3abfacd7
- SHA512 7d27178100d32c75b02ac3989ed78da12416fbebc9032ac757d316f9a9b6a259c3f9cbd3ccb994b5fabdb204de3ea7cbd6eb5fd68e26614b549e6846c2bb94db
- SSDEEP 48:68WelgEt0CsSS94TVZivz1Pjs2wF5bD4AfKgPJ5fMSVddRlQQG0w+UwB6UoXsofW:ZWeQSa4TVZ6dFU5H4MK+V/HQQGhM
- TLSH T1CED141B7BB5309B2E15515B522B16F07BEB1E1251A2DC50BBB5062FE9808113AD0D7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target axvlc.dll
- Size 291KB
- SHA256 2d3a4fe62aa3078d6b2e22890d5896a75bff66ffead1652e93312d16bcfc3e85
- MD5 b6f67307f860a14bc7eb45d2ec36facd
- SHA1 f84b8e0ad9d88edbccb63489aa3aa66c116e3fb2
- SHA512 9bb3084707660c8cce3df4bbfe78c006543f9a2ed32baf4f7cc11ccb176fa50958f8334c38d4dce1722c4bdac0fd31a6523c93523dd1f5ef1de2da6263a41c05
- SSDEEP 6144:zZV7dY4ovDMvTFjy4WToXjrOEPW1j1V0aYbjlC:zDSfIvT/TrU7Ybjl
- TLSH T1D7544C01FB838CF6DA1708B1D19AB7BF4B20AE049415CE16D714FE29ED73522E63E256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target http/flash.html
- Size 2KB
- SHA256 07888cd5471d45a5d9ad1ee66a0940688d790b80540e427b20073814a3747f0c
- MD5 e2b446251287e4e2ce5aa2bceab350ec
- SHA1 0d692ac88024d0505f3f73c3eff28f8253473e23
- SHA512 24b7a176ebabc0bc8d47beaa5cad1fa7a9b582cd4852689ae1cb432e1dd37e01185a13b03a6bf10eb2da78e297e8a8e0b1fadc1b8e9ed2e602dc9b9dc73a50a9
- TLSH T127417655ECCECC2861708B60F9F1D614E16EC102F38AADD4F494B96BA14F1E8A473F89
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target http/index.html
- Size 2KB
- SHA256 5ffba8ab29c1488be12f94455d2ef187a4ad8e729e5cfd76b0b19d1b3334c427
- MD5 0190dd5df975adbae1155dcc51a801ec
- SHA1 2b55ae3f2f55889ca46546e20ddbbaee435e5c75
- SHA512 91af51856090001cf63e27ba40c9259bcf38a2f784e85de3bd6914e4ac7853c8736f24a52dd9d5cfb312c475f906256eb58d934dfaecf4dbf295d6c54744e1d4
- TLSH T1AA51201898DB8EA4607047A0B592D78AE15EC95FF3887D5CB48C22BFEA1B3E440935C8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target http/js/functions.js
- Size 37KB
- SHA256 6b324ea3daed34af06cae52f3f4e6ae479f2274df9cec3dc62d00d80364f4b69
- MD5 0ceb17e1b53e09fa37552bebe7107400
- SHA1 88f0b3e2e274dec1f1a1d2223a42ca6da0c7ec40
- SHA512 8136f6d99611e792cd08ce8e7deca91fbfbc46528c7258a51546436fb6ea7399d380caa41744691060ab63b346549e355c0ea7f24b16ace70e5e9f58126c9ac4
- SSDEEP 768:e/Q5Ks1Ba1VFYW/RPX3ndHe2NuOStuGUs+l1lBKfYtQ4qRyPncPYqJP//seM1RmU:YjVRPX3nd+mlStXUZl1SfYtQ4qRyPncA
- TLSH T1A8031BE979111E3649F367799B6782E4FCB840231202A155BE4CB48A5F3CDA501BAFFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target http/js/mosaic.js
- Size 10KB
- SHA256 836a4e2415ebee39e5ef31b677483b7797e571f7c7d6a976871f4f77d2c9c5bc
- MD5 aeb9330582d3af0c5a98cf08c2970d58
- SHA1 71c938e3da0d471eb6bf3c58c9097792e09cd7d6
- SHA512 f74d52e9cc495d316bea15fa227ae8d8838306a7c8cdcd6fcc1f152b43cc2c046bc1f5d9adf4034acc4e85092243b044784f5c6a573df4865346f5f1459369ff
- SSDEEP 192:f/QXxjRfEuQd+LWwGAWAGj/aH3o5xJikjE5nY/TwzTOhdl:f/EjmRqRqiy2sdl
- TLSH T1EC3220549D128E144DF753E7AB967DD8E8F742130A5A87097A0CF2D90F3CCE006BADA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target http/js/vlm.js
- Size 30KB
- SHA256 115395bdc5c62ae7005fa8a204a6cd0126edd3bf9ca77619bb63fecf13b8384f
- MD5 97c8aa570817f8677c93eb11de95de6b
- SHA1 da6bf2ea09cfc00f09da5f4b7044590406fcdc1e
- SHA512 5ccb0318832717f5d46415e249efdd63767a2870205d715930b4d6d4698778b0d042462ed68ff0b91fd9930e4e5af07e01c57b91fa8d903af30de994e007a910
- SSDEEP 768:y/KBFLDAzAli2AVM1SEO+Q/JSCet/dxOY:3BFLDAzAli2AVMwEOjSCezxOY
- TLSH T1E3E200AAAC671F310DB621696B3652E4F8B0432755019A16BC0CFC8E5F7CE1185FAFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target http/mosaic.html
- Size 2KB
- SHA256 586202eaa5697a83146c2832f2c56c7cd92d8a9e80154127573241557062a13b
- MD5 39727c66b45b7250bbc85feae3eed678
- SHA1 9fa24c34d11e7c7c83631de902089d60581a287e
- SHA512 7d0ffb4ae4583912d09501b9deb7b89dafcdb9a618a949631b740d6fb5d1941da29279fc13bd462ace1fdd89e71f93b52294e59eaa104e0edae3141189cc3603
- TLSH T1D041320C888BCEB564200690B492DB59E16EC80EF38CBF6CB15C11FFE61A7E844635CC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target http/old/admin/browse.html
- Size 2KB
- SHA256 a1d818ed6059e541d4c53d9380607530f793d958c843afdebd436e7e467be831
- MD5 8aaec8a2847eca746108db800b4219fd
- SHA1 106e87fdc29cbca3395193562fd5be07062087c7
- SHA512 91ee779dca363f9883b2dc32bb36e946f5b12ffd88eff7eb75a93e225749f075daba9d99cf79ab20e892271fe8567f3c448da265622491a20a1c45148f0b54df
- TLSH T1E351DF11D1EAAA7661714394B180DB98EDBD4C67B30C3644354E7B8B9F3F934419F186
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target http/old/admin/dboxfiles.html
- Size 762B
- SHA256 32398d3dfb77e9c5897ee66b88da3d04eb145cbb1c7c47966427ceaf918bcd27
- MD5 d09ed0e0b80f79d4980e317b59516be8
- SHA1 e56ef6be3ae696efb16dd3f43d5f45cdedddcfe2
- SHA512 b602eab1ec2cb51b5a904d2e5f468ad01889ff6303c0deb8496a773468b3953fbcf15ccfa6c42b45f14a4285e69c89e24d9aaa28da372ed70652fdcafdfba630
- TLSH T14E014B85D5FC5262328497E834E9E399AC7C4C67F20C329C1195BBC5C50DA3474AB486
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target http/old/admin/index.html
- Size 4KB
- SHA256 4eed2e5c29484a2b5e67eb18873c6a8ec130ab922970f60a26469df1895c0968
- MD5 f9fa96be3f6948ea192ceab819657096
- SHA1 9c8e90ab1078db534e13f04e418643601727c93e
- SHA512 f5776d8c6ad885fe9adc4d939dfff6520444fc313742979465f71c240fe4ef868e884d0f687f73cac5ebd19aed5afd0ca57c21a4441313284e9b0479da5df3c1
- SSDEEP 48:capyeetJCYRsL+RocbkDqvxxJ1jv7q98y298ROZVN:RX8JhTpkDqZ9OV2gOTN
- TLSH T1A6915B22E0D8B12362B74359B1E1AF98EEBD9863F6492650355F3B97CF3DD308503186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target http/old/index.html
- Size 9KB
- SHA256 52ed499749b21dc3eb3d5ea17f7efe3b132dcbb8b4fc4a544efdf13fab84717b
- MD5 94609b8186b17ee7184f628a83c8a394
- SHA1 e1e184857c9ad04556c4990639d738e1dfd22360
- SHA512 8d59ee216f27d0753f00d5f6c6e6a5c48aeeb357411e97caf23b0a487dd1e4e7aa9b14eebca656b1cb3a46ed0f0fd80a2d9ad217e4af3c5b345b1fdf3aaa2f77
- SSDEEP 96:wm03K52PjZPSynRzkgB2V0RqRXmwMwTyJu9IKx80jwxeQmvjS54GoOt/wmGn5:R0JPjZqyn6g33wMwmz0ZBG9t/wmG5
- TLSH T1B2224321A4E68D7122B246A477F1974DED3CC553B3093648395C2B937FBEE3001ABB86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target http/old/info.html
- Size 630B
- SHA256 54f5d246ee87dd26807daea1b8db86edaf7b471a2a661c4187e2a9e765de9919
- MD5 d03bfd02d6391355b4e7287988c315ae
- SHA1 acc2b9b4bd421775a715503a6d8a9c383c4e1bbf
- SHA512 ab86e56884818a37d3775f6aa7535a8000a1d602b6b8a7eca3948590513249c196277c35b34eec13a3477d9da75c5d9e67bf621e1b03cb1f59cddc0e73142144
- TLSH T190F09622E2E628632133035624C2D758ED3D28A7B3087741794D6B5BEF3EA3045C3182
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target http/old/vlm/edit.html
- Size 3KB
- SHA256 db85f353a82d292f6f605c004286590b0ecc99d64415bc4e5b00e7889c06464e
- MD5 732610781c3884e1f19b113ad2d16754
- SHA1 181fcde5d35d9c665760b24519aa7aa67eb60fc4
- SHA512 b94abfc094ea10add0b446189e57d9e8d5e90243a91b905371fd40408f83e1611fde8a898b0d620a570a9e64a1b27bf87001fa852fecfca7a6c7cf3f082bb536
- TLSH T1BA61AE22A4DADE3166E146A4A2E1AF4CEEBC4973B24835843C8E2FD3DF749704247547
- MD5 SHA1 SHA512 TLSH
Score3/10