Overview

overview

10

Static

static

10

9b2848137b...18.exe

windows7-x64

10

9b2848137b...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03-04-2024 00:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9b2848137b58376aeb2f846c1b9f0632_JaffaCakes118.exe

  • Size

    2.1MB

  • MD5

    9b2848137b58376aeb2f846c1b9f0632

  • SHA1

    987174e05cc30b559e4a3a6dff27c1a95efbd220

  • SHA256

    fb3b4de61d6614bcb4e34ef2d7f6549f548d0b00cde17318282158c2c8ce9c2a

  • SHA512

    11036c75a62eddadc5244262d5f48af96afeed0a8012e6d2054440cf942ff1daf3d68e1b7498b84b6a596ada20f0baa0ebac975b2633b104bc4b49f6bb854588

  • SSDEEP

    24576:kyS+XwYnYkj+rzpB2z/J8SfiniZmN1O6PTZmcyfl3juQ55313N:ky7Fj+rzXFNAKefl3F

Score
10/10
nullmixerdropper

Malware Config

Extracted

Family

nullmixer

C2

http://hsiens.xyz/

Signatures

  • NullMixer

    NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    droppernullmixer

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b2848137b58376aeb2f846c1b9f0632_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9b2848137b58376aeb2f846c1b9f0632_JaffaCakes118.exe"
    1⤵
      PID:2348

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2348-0-0x0000000000400000-0x000000000051C000-memory.dmp

      Filesize

      1.1MB

      Download