General

  • Target

    JJSploit_8.3.0_x64-setup.exe

  • Size

    6.8MB

  • MD5

    2d1ab759a00dae397322eaeefce3c2ab

  • SHA1

    9a7eba9c9cb2af0343291cebf616257bcb59b090

  • SHA256

    cfae62141434fc6369c2139577ab2961cb1c6c64b95c7b03172c30869f61a894

  • SHA512

    6c9ae6b230a25e7efb1b3f31a8a2e1721d667c049daeb88066abc6d86139015086db19e0de93f5fe571831f8a292b763b5fbe487032dfa2033d920c580dc6f4d

  • SSDEEP

    196608:hlKAMbhz1OQrovnaNDhmIONiIjqqXLqIVKdkB:hlKnbh4QsPaNDhAiIN4kB

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • JJSploit_8.3.0_x64-setup.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    ed06d61f6957c32cd324837726a5a070


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    17cb20871354b907f678c7c220e4ca60


    Headers

    Imports

    Exports

    Sections

  • JJSploit.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    ac435dfa812fddee99bbf7a986186d1d


    Headers

    Imports

    Exports

    Sections

  • JJSploit.exe
    .exe windows:6 windows x64 arch:x64

    Password: 123

    639b0f61a9b0e05c6d19584800da53d5


    Headers

    Imports

    Sections

  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • resources/luascripts/animations/dab.lua
  • resources/luascripts/animations/energizegui.lua
  • resources/luascripts/animations/jumpland.lua
  • resources/luascripts/animations/levitate.lua
  • resources/luascripts/animations/walkthrough.lua
  • resources/luascripts/beesim/autodig.lua
  • resources/luascripts/general/aimbot.lua
    .js
  • resources/luascripts/general/chattroll.lua
  • resources/luascripts/general/fly.lua
  • resources/luascripts/general/god.lua
  • resources/luascripts/general/infinitejump.lua
  • resources/luascripts/general/magnetizeto.lua
  • resources/luascripts/general/multidimensionalcharacter.lua
  • resources/luascripts/general/noclip.lua
    .js
  • resources/luascripts/general/teleportto.lua
  • resources/luascripts/general/tptool.lua
  • resources/luascripts/jailbreak/criminalesp.lua
  • resources/luascripts/jailbreak/policeesp.lua
  • resources/luascripts/jailbreak/removewalls.lua
  • resources/luascripts/jailbreak/walkspeed.lua
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections