4496e61892ab48e011dfe1b2715a498952625e5f9f13a5285e86a6ea94b81b78 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

1abfdd93ae...18.exe

windows7-x64

3

1abfdd93ae...18.exe

windows10-2004-x64

3

$SYSDIR/Fe...er.scr

windows7-x64

1

$SYSDIR/Fe...er.scr

windows10-2004-x64

1

$TEMP/dospop.exe

windows7-x64

7

$TEMP/dospop.exe

windows10-2004-x64

7

tbu03852/dospop.dll

windows7-x64

6

tbu03852/dospop.dll

windows10-2004-x64

6

tbu03852/options.html

windows7-x64

1

tbu03852/options.html

windows10-2004-x64

1

tbu03852/s...g.html

windows7-x64

1

tbu03852/s...g.html

windows10-2004-x64

1

tbu03852/s...b.html

windows7-x64

1

tbu03852/s...b.html

windows10-2004-x64

1

tbu03852/tbhelper.dll

windows7-x64

1

tbu03852/tbhelper.dll

windows10-2004-x64

1

tbu03852/t...091.js

windows7-x64

3

tbu03852/t...091.js

windows10-2004-x64

3

tbu03852/u...ll.exe

windows7-x64

1

tbu03852/u...ll.exe

windows10-2004-x64

1

tbu03852/update.exe

windows7-x64

1

tbu03852/update.exe

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 09:21

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

1abfdd93aee352a3faf2cff9c136b1db_JaffaCakes118.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

1abfdd93aee352a3faf2cff9c136b1db_JaffaCakes118.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

$SYSDIR/Fergie_Screensaver.scr

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

$SYSDIR/Fergie_Screensaver.scr

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

$TEMP/dospop.exe

Resource

win7-20240220-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

$TEMP/dospop.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

tbu03852/dospop.dll

Resource

win7-20240611-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

tbu03852/dospop.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

tbu03852/options.html

Resource

win7-20240221-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

tbu03852/options.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral11

Sample

tbu03852/static_img.html

Resource

win7-20240508-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

tbu03852/static_img.html

Resource

win10v2004-20240611-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

tbu03852/static_pub.html

Resource

win7-20231129-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

tbu03852/static_pub.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral15

Sample

tbu03852/tbhelper.dll

Resource

win7-20240508-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

tbu03852/tbhelper.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

tbu03852/tbs_include_script_008091.js

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

tbu03852/tbs_include_script_008091.js

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

tbu03852/uninstall.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

tbu03852/uninstall.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

tbu03852/update.exe

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

tbu03852/update.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Uninstall.exe

Resource

win7-20240419-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

Uninstall.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

tbu03852/update.exe
Size

76KB
MD5

c050609bcf90684099902c043661e739
SHA1

e471468f128e3f8899d53f54f0fd64561a297210
SHA256

3751b8982c25d16aee9bc7dd5e22c83f323c8c68780012773612778f20279af8
SHA512

2e199a074fbef486518949bd57da18b7b221eb1d9d391c30d7ee73817e2d514438d25ed46f2ab68f79f0645013df5fd35100eebc805bea3830aa7b1cfb8d9846
SSDEEP

768:kcBMGw/DoPE/HxUNtN8eWbSQxH+Ns1HBBlKstEZxrxchYy0tkwAhY/zGUiwfGI9f:kcB9VARUeb7xGtNcK9kwAhijhfGTthiF

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\tbu03852\update.exe
"C:\Users\Admin\AppData\Local\Temp\tbu03852\update.exe"
1⤵
PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy