Resubmissions

14/09/2024, 13:52

240914-q6txkaxbjr 7

14/09/2024, 13:50

240914-q5dh7axeke 7

General

  • Target

    JJSploit (1).rar

  • Size

    6.2MB

  • MD5

    f164f75b5932a1977967643803f0c2dc

  • SHA1

    4db4aef8cfcee1c281002aa09ff2a7ec6a628ba6

  • SHA256

    adc33b5ce226f716ea4e74b5561d4ca3b1cfdc2d282ffabd8fa3ae63dd705a30

  • SHA512

    9669d89faab831000721365ef82b89968757b53a575199e71ae840518bb34261914cbbeac991fe709535e69eb3d3f533b4f64f8421764996f54579d9b7903422

  • SSDEEP

    196608:7peNVLKN7qUnnzqhhqYMWGH0SGgPwIy3c5eoIkct9QNsjfxW:74MRqrhhqVHPnyH11f+sNW

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • JJSploit (1).rar
    .rar
  • JJSploit/JJSploit.dll
    .dll windows:6 windows x64 arch:x64

    b931669d007f056376c17d03880067ce


    Headers

    Imports

    Exports

    Sections

  • JJSploit/JJSploit.exe
    .exe windows:6 windows x64 arch:x64

    791af27acb3fa0593e431c296d38b6b1


    Headers

    Imports

    Sections

  • JJSploit/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • JJSploit/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • JJSploit/resources/luascripts/animations/dab.lua
  • JJSploit/resources/luascripts/animations/energizegui.lua
  • JJSploit/resources/luascripts/animations/jumpland.lua
  • JJSploit/resources/luascripts/animations/levitate.lua
  • JJSploit/resources/luascripts/animations/walkthrough.lua
  • JJSploit/resources/luascripts/beesim/autodig.lua
  • JJSploit/resources/luascripts/general/aimbot.lua
    .js
  • JJSploit/resources/luascripts/general/chattroll.lua
  • JJSploit/resources/luascripts/general/fly.lua
  • JJSploit/resources/luascripts/general/god.lua
  • JJSploit/resources/luascripts/general/infinitejump.lua
  • JJSploit/resources/luascripts/general/magnetizeto.lua
  • JJSploit/resources/luascripts/general/multidimensionalcharacter.lua
  • JJSploit/resources/luascripts/general/noclip.lua
    .js
  • JJSploit/resources/luascripts/general/teleportto.lua
  • JJSploit/resources/luascripts/general/tptool.lua
  • JJSploit/resources/luascripts/jailbreak/criminalesp.lua
  • JJSploit/resources/luascripts/jailbreak/policeesp.lua
  • JJSploit/resources/luascripts/jailbreak/removewalls.lua
  • JJSploit/resources/luascripts/jailbreak/walkspeed.lua
  • JJSploit/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    17cb20871354b907f678c7c220e4ca60


    Headers

    Imports

    Exports

    Sections

  • JJSploit/workspace/IY_FE.iy
  • JJSploit/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • JJSploit/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections