Overview

overview

10

Static

static

10

1ffd6559d2...1c.exe

windows7-x64

10

1ffd6559d2...1c.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ffd6559d21470c40dcf9236da51e5823d7ad58c93502279871c3fe7718c901c.zip

  • Size

    198KB

  • Sample

    240115-bsw3faeffp

  • MD5

    c3b7b243641124ba74c1e96e846b732b

  • SHA1

    f4da6268f88db36e459ffebf369ad830c9ccb128

  • SHA256

    76d55d16db3037d60655b8f6a4751661c2a0c94b997a28e8497db78a354e7da1

  • SHA512

    4bc802199e1ad3967f8aea2582640c2fe6e132e6e42664d8551366ec771fa3ee936ef1f8771d81aae7da51cb0dfa4b9e4d99ea5f5760de703a1369544deca790

  • SSDEEP

    6144:i8OeNEGOVrb5JWndlGoxEYwyuTh23vUBTSshUA:i/GARilbuT4KTZ+A

Score
10/10
sysjokerbackdoorloader

Malware Config

Targets

    • Target

      1ffd6559d21470c40dcf9236da51e5823d7ad58c93502279871c3fe7718c901c.exe

    • Size

      392KB

    • MD5

      d90d0f4d6dad402b5d025987030cc87c

    • SHA1

      fad66bdf5c5dc2c050cbc574832c6995dba086a0

    • SHA256

      1ffd6559d21470c40dcf9236da51e5823d7ad58c93502279871c3fe7718c901c

    • SHA512

      c2faeacfd588585633630ad710f443a72c7617c2d5e37dbfe43570e6ac5904e4b81eb682356a48a93bb794ef5e9d8ad0d673966d57798079b4de62ea61241024

    • SSDEEP

      12288:m00VdXicNHeft0d/BiqpD9JD9lusIhAzhM2RdM:mrzXiu+FZqp72iDc

    Score
    10/10
    sysjokerbackdoorloader

    • Detection for the Linux version of Sysjoker cross-platform backdoor

    • Detection for the macOS version of Sysjoker cross-platform backdoor

    • Detection for the windows version of Sysjoker cross-platform backdoor

    • SysJoker

      SysJoker is a cross-platform backdoor first seen in late 2021.

      backdoorloadersysjoker

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks