General

  • Target

    jj.zip

  • Size

    2.9MB

  • MD5

    6c347ed2bfe246dc57b4909d3954da90

  • SHA1

    757809043b3f8a71ed91e78d4021c4fa48e6e5b6

  • SHA256

    3f1dbdc8075bdf3119c2c5b09541033dfdf4ab035a7896d327e143fdbdc9757a

  • SHA512

    43f58f3909a855089d6acffd84fce2c9069a6ae65c2986551daac77b5ab335321d3d61eb6b18e7156e9f194a299d58ecf7201cfa81b27c24eb5f16ddb557fc28

  • SSDEEP

    49152:Ej5CT3ubvz1uKIYeNX1FLQGkqo1Pz/Ig62cEMt1m7OAY+n1gaCyNEu0V0aKzh8Js:EVCT3ujcKIYWlhQn/17QWcTnm7b1gcNx

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • jj.zip
    .zip
  • JJSploit.dll
    .dll windows:6 windows x64 arch:x64

    b931669d007f056376c17d03880067ce


    Headers

    Imports

    Exports

    Sections

  • JJSploit.lnk
    .lnk
  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections