General

  • Target

    115a2bc61fb0d016e39c4d7a07d6e7e6_JaffaCakes118

  • Size

    6.8MB

  • Sample

    241004-ccjylssbne

  • MD5

    115a2bc61fb0d016e39c4d7a07d6e7e6

  • SHA1

    b91c21a6aa41db8158e10168bcc46011bf788145

  • SHA256

    4e41f28d30208f594cf5d3c929c7142d421ec5b862b8ef3ba3cc75cd8dcafd0e

  • SHA512

    6fef0d71b4b19bace301316ab16a55b43fe499afc355318fc49316d871481e6cc0d3e2fa14ea9287b099e805ff49bbe99a14e650dc5b75a31e44852f834f9ccd

  • SSDEEP

    98304:SlZmih3vf9wQUladFYCITWvfafbcmZVNn:Slwih3vf/Uswbhd

Malware Config

Extracted

Family

nullmixer

C2

http://watira.xyz/

Targets

    • Target

      115a2bc61fb0d016e39c4d7a07d6e7e6_JaffaCakes118

    • Size

      6.8MB

    • MD5

      115a2bc61fb0d016e39c4d7a07d6e7e6

    • SHA1

      b91c21a6aa41db8158e10168bcc46011bf788145

    • SHA256

      4e41f28d30208f594cf5d3c929c7142d421ec5b862b8ef3ba3cc75cd8dcafd0e

    • SHA512

      6fef0d71b4b19bace301316ab16a55b43fe499afc355318fc49316d871481e6cc0d3e2fa14ea9287b099e805ff49bbe99a14e650dc5b75a31e44852f834f9ccd

    • SSDEEP

      98304:SlZmih3vf9wQUladFYCITWvfafbcmZVNn:Slwih3vf/Uswbhd

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

MITRE ATT&CK Enterprise v15

Tasks