Overview
overview
7Static
static
7jaffacakes...7f.exe
windows10-2004-x64
3jaffacakes...7f.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
3$PLUGINSDI...nt.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...eb.dll
windows10-2004-x64
3$PLUGINSDI...eb.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...it.bat
windows10-2004-x64
3$PLUGINSDI...it.bat
windows11-ltsc_2024-x64
3$PLUGINSDI...ge.dll
windows10-2004-x64
3$PLUGINSDI...ge.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...n12.js
windows10-2004-x64
3$PLUGINSDI...n12.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ime.js
windows10-2004-x64
3$PLUGINSDI...ime.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ket.js
windows10-2004-x64
3$PLUGINSDI...ket.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ftp.js
windows10-2004-x64
3$PLUGINSDI...ftp.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ttp.js
windows10-2004-x64
3$PLUGINSDI...ttp.js
windows11-ltsc_2024-x64
3$PLUGINSDI...tp.bat
windows10-2004-x64
3$PLUGINSDI...tp.bat
windows11-ltsc_2024-x64
3$PLUGINSDI.../tp.js
windows10-2004-x64
3$PLUGINSDI.../tp.js
windows11-ltsc_2024-x64
3$PLUGINSDI...rl.bat
windows10-2004-x64
3$PLUGINSDI...rl.bat
windows11-ltsc_2024-x64
3General
- Target jaffacakes118_e173d6ee09c7b2cf93d536da906272028bfc8a383a5936e3250cfd7a8d3a9c7f.bin
- Size 810KB
- Sample261002-ml89zagd43
- SHA256 e173d6ee09c7b2cf93d536da906272028bfc8a383a5936e3250cfd7a8d3a9c7f
- MD5 ae143e3fccb0efb62dc0591a2d685ff4
- SHA1 47f8cbf898362f3afdcac36cb779396e2d444a75
- SHA512 669eb19b3078f2696dd823f823364fe9b90b11c21c69693e34204d2db948ec71ca594eaac94bfcd103438602af99db9ddeb77b2253fc432af9d041082a1cb5a8
- SSDEEP 24576:ipfi6ZSbsNubbWInVGrhdw2US1Pb+vZeDe:izSYsGtdw2DJa6e
- TLSH T1620512423E4D98A1F7294239AC1F5A3649D57C74B7802BDF27E9F7AF34B2291452B083
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_e173d6ee09c7b2cf93d536da906272028bfc8a383a5936e3250cfd7a8d3a9c7f.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jaffacakes118_e173d6ee09c7b2cf93d536da906272028bfc8a383a5936e3250cfd7a8d3a9c7f.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/CustomBrandingURL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/CustomBrandingURL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/CustomNSISdl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/CustomNSISdl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/CustomnsWeb.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/CustomnsWeb.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/FloatingProgress.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/GuiInit.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/GuiInit.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/LuaBridge.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/LuaSocket/lua/ltn12.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/LuaSocket/lua/mime.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/LuaSocket/lua/socket.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/LuaSocket/lua/socket/ftp.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/LuaSocket/lua/socket/http.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/LuaSocket/lua/socket/smtp.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/LuaSocket/lua/socket/smtp.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/LuaSocket/lua/socket/tp.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/LuaSocket/lua/socket/tp.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/LuaSocket/lua/socket/url.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/LuaSocket/lua/socket/url.bat
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target jaffacakes118_e173d6ee09c7b2cf93d536da906272028bfc8a383a5936e3250cfd7a8d3a9c7f.bin
- Size 810KB
- SHA256 e173d6ee09c7b2cf93d536da906272028bfc8a383a5936e3250cfd7a8d3a9c7f
- MD5 ae143e3fccb0efb62dc0591a2d685ff4
- SHA1 47f8cbf898362f3afdcac36cb779396e2d444a75
- SHA512 669eb19b3078f2696dd823f823364fe9b90b11c21c69693e34204d2db948ec71ca594eaac94bfcd103438602af99db9ddeb77b2253fc432af9d041082a1cb5a8
- SSDEEP 24576:ipfi6ZSbsNubbWInVGrhdw2US1Pb+vZeDe:izSYsGtdw2DJa6e
- TLSH T1620512423E4D98A1F7294239AC1F5A3649D57C74B7802BDF27E9F7AF34B2291452B083
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/ButtonEvent.dll
- Size 4KB
- SHA256 5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- MD5 fad9d09fc0267e8513b8628e767b2604
- SHA1 bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA512 b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
- TLSH T1EF81523B97A026F1C640273B53D71E629B3BD1302316B02D8DD32D0CA93055BEC29743
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/CustomBrandingURL.dll
- Size 5KB
- SHA256 2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156
- MD5 e4c1b74859c17671ffe1c0602fd56b44
- SHA1 15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1
- SHA512 9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925
- SSDEEP 48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH
- TLSH T1A7B1FA3A73C645F3D73302326A631967BBB945120352901FD6AB17E9F790D2BC801763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/CustomNSISdl.dll
- Size 40KB
- SHA256 dcee4695192b17a77ca40f63234298fa02326bde2a2a34bab373ac5cc2fc5f48
- MD5 bb81b9946ffc1e50b7a052cd00ac2690
- SHA1 0deb5a4c1effa39d22e89199dbb1e6695246848f
- SHA512 9c1e9fcac43aa41cf6db56557a7d720db52013b78e048ffa821e608868c2bc97d30aa9087047a5faaaed39655759da0d6fd6097f273c30ce51b0f0963c8a739c
- SSDEEP 384:kBrBOvI88qsfnZsFTyQ0mipmycAC/hZAOT8pA40PIL1lBlE:kBrmB8qsfnZeTyQ0mZ7h26g1d
- TLSH T10B13B321D211F03FF4F3297A53EF176AA46852B8270624C734D8EA9ABBD45DBBD31106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/CustomnsWeb.dll
- Size 42KB
- SHA256 39fefafc4ede6838061b804a44b0416ed4929c3c3ff9e64b1e0956186734094f
- MD5 f705fa42cb1edf73153cfe6bef657387
- SHA1 24462c7b144ecb7778ca7a93b9e1dd62464ea81a
- SHA512 d993d37b53b60a009021154e5032965c29789fbb8d7b0907dc0877f36abe5d7456a33a8e3111158ee82fd306d24d3aeabe81be776ca5d2f09b8413ff437aa936
- SSDEEP 384:Rl9jSW3OJO9zbkU3UjVzU2QSvA5q/8Bigip:RHjxOJO95mVzjQCAU/S
- TLSH T10913D99CAC06862AF8B2417E46B8D527726EDD14B314BEF7205C1D126DAF1F329B1CD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/FloatingProgress.dll
- Size 25KB
- SHA256 aacd01fddcfd56fbeadcdd83e733778ca45ce38ad8145196f0ac2b4415018762
- MD5 5f11bfefee27008b9ac247aa401605d5
- SHA1 a7faf8701a2e9675df065eaf2ffdf8acbaf4c0f0
- SHA512 574c2fc99f342e1bb5e98bda016e63294494eb7bf1e6b080ae7683b0ca359c5a2fe4df222e55cb5343b71134b16c2b5f807ac703e8ec547a99bd74392f880c2c
- SSDEEP 192:+dEyZh2Poi73yFDoUjSFWbY3Lf+25meJVOuN+Sx10mvmWc4b6TY:+z72l7Ifc7fV8C+I2mw4b6T
- TLSH T1D3C228BB3AE294A2DE5907709FAB87BE0B38BD2D3215000B4752F68F557254BD8316C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/GuiInit.lua
- Size 74KB
- SHA256 1b25175e349adfc1c48c4522b42a497d55dd97a0c96e44512f130dc70ab18d9e
- MD5 fcf076a0f6941db8497fc1488edaa3c6
- SHA1 4b93a6ed8970a205d322bb19f36a6c7293597e8c
- SHA512 9f95fa060f32b12036e78603cc0f2c9d5ab67ab1580d68efd94766f45f8ac22e4cf71fbbcd22797c62ed8c6e3946cf5ffa6bc72adacf2443f612314d3dba2f05
- SSDEEP 768:dyEpUxaHpHIqRSZLguu2IsIsEqPi/bmT/MHkkR/v63b+9+LshrrcLSop4WXT6ERP:xzRCgu4BR5mTD3b+prEBp4w6EiM
- TLSH T17C73C65B72816B702EF2C2BA5DCF1046EB24442307659265B5DC43D43FB116CA2FABFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaBridge.dll
- Size 12KB
- SHA256 fdd2fc2037d16b90e379fbc973335bbd490e6992c5e58a11aefb0e6978178832
- MD5 d47ebbfde3308ad37511d7aae9b942aa
- SHA1 e5b2f5e4e0d7d9bdc7c4444d06b3ccc29aeb9404
- SHA512 a9263330053f09c1bb39036d8f0b6c41f89621d14273021841440e085f41e15041606a24ca8b0ee6e80c3b94170b24f6ea981f246c576a881df22c4b971ef781
- SSDEEP 192:NDV16s16zCc0DFJLfKpCAhC4t9gyfVwxlXMmt9zdBOQt31g/n:P1D6+c0DTL27Ufjl8mdBX16
- TLSH T13442D706A66104B2DE9541B170777F124EFE790122C2285A9F1F7A453D16B92EF3B34F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaSocket/lua/ltn12.lua
- Size 8KB
- SHA256 b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
- MD5 e440044afe6c761507a996b5b45ab0f9
- SHA1 ef772c758fd5d6098b41375f35ac26f3963cc306
- SHA512 8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
- SSDEEP 192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
- TLSH T1B002BB8A3D86F1B569F2DA99984B6401F1668853827A0164FC1C94D43F3026DF3FEFB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaSocket/lua/mime.lua
- Size 2KB
- SHA256 e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
- MD5 4bfdaaab9014fe129bc6388fd5687c8f
- SHA1 2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
- SHA512 3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
- TLSH T1CB51E260BDC3B4E1E4E3E856D19F5814F0692817103512A1BC4D16971B7357AE2FF6F8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaSocket/lua/socket.lua
- Size 4KB
- SHA256 15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
- MD5 74dbe1060e91112e1c21ef9870b4a587
- SHA1 86afb6aecb0a8387ffa5dead1cc9808332f94310
- SHA512 73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
- SSDEEP 96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
- TLSH T1D781668DBDA3F265BAF3E694998B2005F176845312781106F85C80A17F7251DE3FEBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
- Size 9KB
- SHA256 26167d7c0f511cca7691ca5ad6ebf85b4427b94ef12e110ba1da75f023db8acd
- MD5 4f83a72dc82a78cad6eb7edbe7d2f152
- SHA1 486dd564c3b2ac467e3eabfad806308f14fabb5f
- SHA512 a5ca1c8955a450a727950d91b720895db55f425f2531bc2d2d17034363961ed52b6cc086289f966ac3c27b056452ab5126ec7d9bb34cf5a92fdf0f725f40781d
- SSDEEP 192:GsooRaLonJfMxBs6gZO2zMAcTcGZqx6iOaBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7iOaBRkfYtppO
- TLSH T16A12ED4AAC87C69165B3C562944B6803F31F5113966C160739BC87E2BF3092E36FEEA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaSocket/lua/socket/http.lua
- Size 12KB
- SHA256 d10fbef2fe8aa983fc6950772c6bec4dc4f909f24ab64732c14b3e5f3318700c
- MD5 7bd12178adca19b584ed1320fdae1e81
- SHA1 839753d73984bda68047585bbc36f9344f51c34d
- SHA512 634428c0e7dc62e7c44f60586c0ab0cedb8b55d9e7f2432f7f681aa58e0a8a444168d104d25c51b7839c06817f83f52a7baa4a0e45df6db283d6d5aa0d5e424e
- SSDEEP 384:x7/thyc+f7zLajrZhVoaOt2yyViz/vcvwkD:F/thyc+f7zyoaOt2yqiz/avD
- TLSH T194421147BD83B060F9F2C255E9871A06F26A902354291095F8BC42DE3F711ACD3FDBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
- Size 8KB
- SHA256 04a2bcc6eb8be03803f7ea4c9aa32e6f70f97fdb6b3bc5ecc5e990cc9932ac90
- MD5 29a883b6fb47f87609d0a5b1973aa45b
- SHA1 6a36815a72d6d7e6c9ac987461e195d17ff979db
- SHA512 c5c648445ea950d58affbacc8b299f26e80b55c4027195cdc055e7d2ee7e3593a59cb36fba8b8dbb8861603d5a03d9867065052b6a3bfd18590a8bd9dd96aac5
- SSDEEP 192:hsbQbmId+aSnZwS/UjGf1MT+IsZDOD4GuuJQwDTaBrW:MH8jk1MTrsZDODhuuJIi
- TLSH T1FD02014E9C82B16414B3C5A6D44B3847E21B5103492D1156B1BC86E7EFB05ADF2EFEBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
- Size 3KB
- SHA256 343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269
- MD5 2cad406e591cade482c7f16f39c21481
- SHA1 84a3ab88ff7a9102c2c6d21bdb6eede6862167a4
- SHA512 ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145
- TLSH T1A271CB867C43F6A4A9F2C665A55B950AF1BD4513012C0085BC8CC1F6BF312ACA3FE7B8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/LuaSocket/lua/socket/url.lua
- Size 10KB
- SHA256 269526c11dbb25b1b4b13eec4e7577e15de33ca18afa70a2be5f373b771bd1ab
- MD5 8fb662c362da002b833793ea7794fdaf
- SHA1 7afaf1ad22c95690cbb3f55226b617121efc20eb
- SHA512 b0b766ac2b5cff879009ad9f74295f7ab0bf8b0628b8aece5597243e0fa96f4a85361728fd8a08eea7d2629dfc5e5d8b6aebca432075ad74c131ad3161a475c7
- SSDEEP 192:zF/d/WjwnQdkUDv7wIECAAA4HaHjCRBxj6AqyQUh/T1htnSDiKbn:zfWjwXUDv7uCAx4HaD+Bxj6AqK/TTsiY
- TLSH T14422FE2C3D82E222EAF1E7538EBF0985F118916311691528B5CC14D53F3692CB6FFA75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10