General

  • Target

    JJSploit_8.8.3_x64_en-US.msi

  • Size

    9.8MB

  • Sample

    240928-tfayjstgkr

  • MD5

    598cfdca1b3396d70bd83d88561f4b2e

  • SHA1

    428cdf5bf72bdb6ac5421cc53797fb620722298f

  • SHA256

    5c9a862f35f2bffdbe8cdf3e08f8187c0e9a45417f912695b0b499ff2853ed34

  • SHA512

    34a2b84afce00bf2fae789d1a1faca54f0b01de252438ef18e192c9aa6e5fc8c23da1c46f814e5aeb627aa2e91b78794f1f9b7056df8064514a791dba6b47f0e

  • SSDEEP

    196608:E2XE/BDC9K8k8z8TXIbqxtW7fGvHDogdnqTettCb5JwwBdn0OpDEl4iloHV1n:E2XE/BDp8P8Y27W7fIjXdqpMwBd/Sl4q

Malware Config

Targets

    • Target

      JJSploit_8.8.3_x64_en-US.msi

    • Size

      9.8MB

    • MD5

      598cfdca1b3396d70bd83d88561f4b2e

    • SHA1

      428cdf5bf72bdb6ac5421cc53797fb620722298f

    • SHA256

      5c9a862f35f2bffdbe8cdf3e08f8187c0e9a45417f912695b0b499ff2853ed34

    • SHA512

      34a2b84afce00bf2fae789d1a1faca54f0b01de252438ef18e192c9aa6e5fc8c23da1c46f814e5aeb627aa2e91b78794f1f9b7056df8064514a791dba6b47f0e

    • SSDEEP

      196608:E2XE/BDC9K8k8z8TXIbqxtW7fGvHDogdnqTettCb5JwwBdn0OpDEl4iloHV1n:E2XE/BDp8P8Y27W7fIjXdqpMwBd/Sl4q

    • Downloads MZ/PE file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v15

Tasks