General

  • Target

    jjsploit.zip

  • Size

    12.4MB

  • MD5

    35a28875b5790415b4103ac2eba0d939

  • SHA1

    926daf51ff4fb290bdd4afb394531d6de7a2dddd

  • SHA256

    57c9f1dea24d00dc5931f3b34fc320b237744386fad51f2464a9a87ae6e6e904

  • SHA512

    129fabbcaf27b1ba25002c1a91e9f2f55fcfe7b1a5a2902f10e72c1ac80dcde67b74881c0a78c9531824c3e04494571e4595a5e4a5f83d7098c47cd4a3959abd

  • SSDEEP

    393216:tCtt8Te5zUvxA1CPwDvt3uFRCGsdEVB3d9ed9eyhTnTC0P3qXYVXuulQ:tYb720fqXIXA

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 2 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • jjsploit.zip
    .zip
  • JJSploit.dll
    .dll windows:6 windows x64 arch:x64

    b931669d007f056376c17d03880067ce


    Headers

    Imports

    Exports

    Sections

  • JJSploit.exe
    .exe windows:6 windows x64 arch:x64

    892aa957a46b0b1f3a6295467a97edcd


    Headers

    Imports

    Sections

  • db.json
  • jjsploit (2).dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections