Overview
overview
7Static
static
3jaffacakes...10.exe
windows10-2004-x64
7jaffacakes...10.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
37-zip.chm
windows10-2004-x64
17-zip.chm
windows11-ltsc_2024-x64
17-zip.dll
windows10-2004-x64
37-zip.dll
windows11-ltsc_2024-x64
37z.dll
windows10-2004-x64
37z.dll
windows11-ltsc_2024-x64
37z.exe
windows10-2004-x64
37z.exe
windows11-ltsc_2024-x64
37z.exe
windows10-2004-x64
37z.exe
windows11-ltsc_2024-x64
37zCon.exe
windows10-2004-x64
37zCon.exe
windows11-ltsc_2024-x64
37zFM.exe
windows10-2004-x64
37zFM.exe
windows11-ltsc_2024-x64
37zG.exe
windows10-2004-x64
37zG.exe
windows11-ltsc_2024-x64
3Uninstall.exe
windows10-2004-x64
7Uninstall.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3General
- Target jaffacakes118_7z910.exe
- Size 1.0MB
- Sample260910-erblwsxbqc
- SHA256 1d1e598dea10c73caef103c47f92b9763c9f279e56fc1dce6301277516549af8
- MD5 e4a15d6d60c5611156e20666d2a760fd
- SHA1 e584fc539b769e5392a699a79c961683947ff50a
- SHA512 921879a903b328c4f5ab2740351582ee8ff3de460e13eaa6f02e47d4f276492b0f09556111f7b6e0433a14d9a89f91e6556a0d560ec759acb0785018efa084e6
- SSDEEP 12288:cXlBEbYi9BPIJXO6g3GysfcmQbNByOa7Utxyweo9L45pNArqzrCZudR36Nn8+dRU:c3yl8ZEmu3kCyw87A2n84o/d4nQY
- TLSH T19835236375C0992BF4A71773213BE37A97F70D105702A9A7BFBA29EBF618044E109487
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_7z910.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
jaffacakes118_7z910.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
7-zip.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
7-zip.chm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
7-zip.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
7-zip.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
7z.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
7z.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
7z.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
7z.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
7z.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
7z.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
7zCon.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
7zCon.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
7zFM.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
7zFM.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
7zG.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
7zG.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Uninstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Uninstall.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target jaffacakes118_7z910.exe
- Size 1.0MB
- SHA256 1d1e598dea10c73caef103c47f92b9763c9f279e56fc1dce6301277516549af8
- MD5 e4a15d6d60c5611156e20666d2a760fd
- SHA1 e584fc539b769e5392a699a79c961683947ff50a
- SHA512 921879a903b328c4f5ab2740351582ee8ff3de460e13eaa6f02e47d4f276492b0f09556111f7b6e0433a14d9a89f91e6556a0d560ec759acb0785018efa084e6
- SSDEEP 12288:cXlBEbYi9BPIJXO6g3GysfcmQbNByOa7Utxyweo9L45pNArqzrCZudR36Nn8+dRU:c3yl8ZEmu3kCyw87A2n84o/d4nQY
- TLSH T19835236375C0992BF4A71773213BE37A97F70D105702A9A7BFBA29EBF618044E109487
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7-zip.chm
- Size 87KB
- SHA256 01c7e94c9daaecae554832103226dd0abe334928cdb1ced6b6812cc5868f2ae3
- MD5 8a86df3dc8a4f0875cbf5cad9ec764ee
- SHA1 c200cbeddcfba340b6e0da3c6788dbdf59b85104
- SHA512 688c3a3d5ba69db2670d4821a60873944697a11f083bbae15ca5b858857c6e0bc79b186a448e89155d3db4bdb2209a1275bc43a7e117ef60286947fb15143394
- SSDEEP 1536:7QZKQHjBQ0iIlt+c054zdjuSqPc0lnH8Dqg7ClUjyM/A:cZdHtQ0iI/+c0ahjudU0pcmd
- TLSH T1349302852B2DC3F2FAC42ABE9B0F1C5500606E3411189FC9F51FE56EE5B4F2415EA4B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 7-zip.dll
- Size 53KB
- SHA256 36f5bf1ac56760bc549db8a74eee97ac00707ff094b0eb8b30b5a524c9e2b03c
- MD5 02805158e5268511361005db9c98d233
- SHA1 2e57bd49bc7f36629a1a998362ba895b906bf01b
- SHA512 8075e58084ae9b4e5cf46a5d788b75f9f6bec6dce33a2ab68fa715151364f9117b9b67dfb73759cf644f5282f70a16511ecb9dbd8f9488b0a2060c1ebd8dd74f
- SSDEEP 1536:x8VuiW6SJnH7miAWlsPg0gFgH7/4nBWX:uVu9HbmrWlsPg0gub/4BW
- TLSH T1BC335C023CE4C5F4E2BE0B30BEBA3BA184FDE8645DF609472B151A9C9D71D85D251B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7z.dll
- Size 838KB
- SHA256 04e328c1981c61361669332b371485b04d65424f67741b317a366909c0bb6080
- MD5 81e1639a96fac1c92caf6427eb94bfa7
- SHA1 f563f1f17bfd886ddbcf1c4b400cac28c02b9800
- SHA512 f3bfdb13e361ddc6fb08100e764d3d486225eb7e61737f5d4bba50fbcf099c0d04e6c2d8a6c08318afe6f69c65b7ab3ca38914d08d0a31e0e1523e4c7e8a51c6
- SSDEEP 24576:L2FFH0KiTkPd3sdWljAcjkULPm6AaJIc1mW:6FA8cdCj9memcw
- TLSH T1A5056C15FBB5C474D28E45328A19AFB250F4E71ACA21E8D367C0FE3E1F32999C129D49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7z.exe
- Size 158KB
- SHA256 35c2a869b20dfbe28e8a7dde3150bb29e23e754edc0d0ee4e4997d8c784ffe80
- MD5 27fdc440e9d9de4dbe710e9c1226b72d
- SHA1 4b7899b8f3784fac7658edb60d5014c9f2cd156c
- SHA512 d3c292514f8c6584d3d0827b30729bb610a09b45e97705ef6e0df62138726e1482ff93cc187c19fcba673f8f06db23f97611866d3099a858fbe0a485d1309677
- SSDEEP 3072:0wANjPeov6oYRm8ryuVAnsfrnr3GRgZZafaYdBfGOHs0exNnP+y7PK+9Pw:cLDDUlhfGa+aYdBOOHSfnmy7Vl
- TLSH T116F35B3139E4C437C2530431CEE8ABF5E0F5E6694E66486723D94B2D6F39991C329F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7z.sfx
- Size 158KB
- SHA256 24b0e087e3b176f4e67bc275a1d0b55d3ee8b75128a94647c5c781062e246de3
- MD5 12a7b8ddc51a04272bb775ff39827bbc
- SHA1 eeadb46576eeff73ece4f87f6bf8ba0a0de2485e
- SHA512 25557f1567caa2ac40a52176c05f9ca445547d66286fc4b80bfa05f47951546ee423655d4b217a6ed42ed89a10d250873e1eda964536e0f7d31703b65722913d
- SSDEEP 3072:LxvDQF4sqwMdHha1Xs+k0yCOIRX4u0hKnIfyGQit4:LCF4NvbfPCAKnIfyUt
- TLSH T1D0F37D213AE5C177D2531531CED9ABF5F0F9E6180F39486723C90F2D2E39A95C226B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7zCon.sfx
- Size 147KB
- SHA256 b378704d3623c7519aeafe8c20176775c4c76510d95fd0652fdf6972291a2544
- MD5 3482bdbad96b26ebff04d86dbfae9a04
- SHA1 f34a8fa37a9ed1f216d2fd3087cf0eaf94727bee
- SHA512 9b92a92ba8da516ff8535d6238c2ed90a94c7172e227011f32ab5b1dc290142d70c4e2faf5755fa8079fe22904023127f84f2c0a7ab703b60e5ff4c11ce1307a
- SSDEEP 3072:H+qeFnBQwOoLLnryKqz/BSF+450L5MdfkPVo1V+PBet7CDW/y:Ne4wOoLjGKqg45MdfkPC+P67CC/
- TLSH T1C7E38C113AE5C476D2430531DED8BBF6E1F5E7280F22486733980B2D7F7AA89D126A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7zFM.exe
- Size 408KB
- SHA256 d83f7dd1eb30c211aa0f73a639922e3260714fd8ccf3ebdab58e77f31a2cc0db
- MD5 6c14c21147452b73ddd51a1af9be0a87
- SHA1 e2d6931e7a9876434419a481f086825fb8fded42
- SHA512 7cd739895931694d972e164ef769a514978e0fc755b8a13532af715b5db08f857b491bd63b95cca155dbbf2fbbc54c2117457f5be560c094c3c70180c935211d
- SSDEEP 6144:/oKvKiXkWYw+nB3FeKrp9N13rpQCGXue4A9Zf7GiSzWsu//bhwR:/DtlL+JF/ffrpQCGXueB9ZDGiSyQ
- TLSH T1D79418113ABCE737D3E51531CF6DBAA0B8F5B9688E72085723D41A2C1A35C45D22AF2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7zG.exe
- Size 221KB
- SHA256 9f37e922c4c0cc6a1e0e7002afe10ea677988aff54392dbf7daa09885a42c04d
- MD5 47133bd50dd744ddb288f4d16d816b0c
- SHA1 e3e7eba14c55da11cc9be470eaa2d5a471a9d653
- SHA512 c44dae0708e201061d6d5fc9b5413985387b61c864b9cd9b2f05989ee2a28aadce43b20fb40ad537e74f690945bdf39d8b46ba756b0558e594a34ebdca03f99f
- SSDEEP 3072:LwHTxt4bSSwurnod3YczguVmTa9qW16xj0d5Y1ScTuzpxipuW/rDf2yR5:Lst4bKanoZXPqWUKK1LT9h/rqy
- TLSH T1E9244B213DE1C837D2610531CEEC9BF5B0FAAE644D32554B23C91F2D5E369A2D226B2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Uninstall.exe
- Size 57KB
- SHA256 edd11897d08d3de75fb1df9dd3971e7719733903c0af30f49ea2c2063115b7c3
- MD5 32e693c2827b09074759269affb8b530
- SHA1 3a444e21cea4abb8f255410f8cec9857321e042f
- SHA512 2887762250ef25e4b9f16bc2d0382d61a3acff4f2b7bbfe3e5bf6bd92b9524968ff6e5e79ccce52869f8320053d87f453e4c87eb8336fa1c2653346524a0e01a
- SSDEEP 768:q1cVhpQI2EQK0iPDh84nScF15GYbWjXO3XJSgd2iZQAm6kRRS+NoJRne152PBs72:oQpQ5EP0ijnRTXJSgdLeAyNxr6GWn
- TLSH T10843CF1A72C0C8B7D56A07B14AB7DBBBFBF6EB0016110B279B605F6F59201839D152C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10