Overview

overview

8

Static

static

3

JJSploit_8...up.exe

windows7-x64

8

JJSploit.dll

windows7-x64

1

JJSploit.exe

windows7-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    JJSploit_8.7.2_x64-setup.exe

  • Size

    6.1MB

  • Sample

    240928-dbm5bawapa

  • MD5

    6bd800ed8b4039dce81610362e16c81d

  • SHA1

    9f99d671e591b1a0b2b76cf2caabf30c4d0af76e

  • SHA256

    4037684f7e39781df4fd09dd7117a985447ee1a5f96ae684a9b727c24c4272f9

  • SHA512

    aad4f41ea301d4f331d6df6bc3bf4291d06eb27ac7f6d3fe1903eb0303f2584153190be6126d6a695c52d6690c9c469ffbdd9a99cc6c40eafafd8fdf81ba7253

  • SSDEEP

    196608:hwQ7ISU05UGOQRCXeEc0kElpx58DgCzlUbv34:hwNSU0i9OEcLgGMb34

Score
8/10
discovery

Malware Config

Targets

    • Target

      JJSploit_8.7.2_x64-setup.exe

    • Size

      6.1MB

    • MD5

      6bd800ed8b4039dce81610362e16c81d

    • SHA1

      9f99d671e591b1a0b2b76cf2caabf30c4d0af76e

    • SHA256

      4037684f7e39781df4fd09dd7117a985447ee1a5f96ae684a9b727c24c4272f9

    • SHA512

      aad4f41ea301d4f331d6df6bc3bf4291d06eb27ac7f6d3fe1903eb0303f2584153190be6126d6a695c52d6690c9c469ffbdd9a99cc6c40eafafd8fdf81ba7253

    • SSDEEP

      196608:hwQ7ISU05UGOQRCXeEc0kElpx58DgCzlUbv34:hwNSU0i9OEcLgGMb34

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

    • Target

      JJSploit.dll

    • Size

      1.2MB

    • MD5

      8c0b7c86c22f99f120fc916a5229b79c

    • SHA1

      456c940054312a542b7431044a39fffd8df091da

    • SHA256

      10a6683f040ede6509a5173487a1eac66045edb9968a03db5011e3f5bb6bdb5d

    • SHA512

      088fd27ae3d093c727f51e7b716af65bd5e2a3e335cb072f64e2343d21822a7e08e92de8bbebece2e6a5ee4258d5f9cdc26f368b2ed729cc35cbe809e539d241

    • SSDEEP

      24576:I71QjZs/NSHhtR2guyPwyVHxl8ymGUiBjlw:k1As/4HhXtnVHP8Jhi

    Score
    1/10
    behavioral2

    • Target

      JJSploit.exe

    • Size

      10.5MB

    • MD5

      a8a9798badc90dd003004f382d876873

    • SHA1

      9c62b36b1e4e9cdf45e25ffb04842298b54399be

    • SHA256

      9eaea32d5a5037b5cfb53b746cd2e501b7e591e4519cee889d8f997991f50cad

    • SHA512

      4f2718f9232e0f56cb6f7eff2d6ac0633c30de34083892443e85b19d9c0eee9d2a06bc39ef30568da3f2f9cc13f5eb45d74b900bd1d5f814aafe9bcfe4ddf790

    • SSDEEP

      98304:nPXR8tC9CoBwQQns+CJdxzDL477a99bUHp6mGs0ITIECo0e08qJlWOaO:PhaC9CoBwQSChuM9bUgGn0tmXO

    Score
    1/10
    behavioral3

MITRE ATT&CK Enterprise v15

Tasks