General

  • Target

    078e2817b7eecc6d123455e5ea5c92bc_JaffaCakes118

  • Size

    6.9MB

  • Sample

    241001-1pq5fswbnf

  • MD5

    078e2817b7eecc6d123455e5ea5c92bc

  • SHA1

    ec58572643fc69e09270d38715332a8bc0104fb4

  • SHA256

    012969088c14240bfbfdd552241ba826a8ab0d40977b4fcea7741696049e9e18

  • SHA512

    61ae0f8974104b0d52f8e035db7d9496a3033110c978d1bbcf6fc8a3b6aba7a21db4cbca99e5fa160718109d1a11ac5611c30c6e495e0889714ba4b9e9f12666

  • SSDEEP

    49152:MhWaYrmEsal17bBQxC/wTW2owTh8fpSKcXfbOV0Mt7JCsRMZT79ftlGg9wN6GEbE:MWrmladFYCITWvfafbcmZTpHf9wQ2z

Malware Config

Extracted

Family

nullmixer

C2

http://watira.xyz/

Targets

    • Target

      078e2817b7eecc6d123455e5ea5c92bc_JaffaCakes118

    • Size

      6.9MB

    • MD5

      078e2817b7eecc6d123455e5ea5c92bc

    • SHA1

      ec58572643fc69e09270d38715332a8bc0104fb4

    • SHA256

      012969088c14240bfbfdd552241ba826a8ab0d40977b4fcea7741696049e9e18

    • SHA512

      61ae0f8974104b0d52f8e035db7d9496a3033110c978d1bbcf6fc8a3b6aba7a21db4cbca99e5fa160718109d1a11ac5611c30c6e495e0889714ba4b9e9f12666

    • SSDEEP

      49152:MhWaYrmEsal17bBQxC/wTW2owTh8fpSKcXfbOV0Mt7JCsRMZT79ftlGg9wN6GEbE:MWrmladFYCITWvfafbcmZTpHf9wQ2z

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

MITRE ATT&CK Enterprise v15

Tasks