General

  • Target

    1576d4a98acd0b02c7e2f145aeb6fd5e_JaffaCakes118

  • Size

    8.9MB

  • Sample

    241005-arwvlsygqf

  • MD5

    1576d4a98acd0b02c7e2f145aeb6fd5e

  • SHA1

    ff5fa2b380b2e637d069d81a969361f79d1bb78d

  • SHA256

    fe0fd15683932ee4e275a3f63d8de80e54ad0a7f9be2ff3595bab0ec8da9fb1e

  • SHA512

    b7f038111b41c1f4176294b01818b0d25782a2d486f4fa320332b8fb32fc8f1d88320e40a1fed701f55735bc632dc55108f59d77e008d4731e85388f20cc81ae

  • SSDEEP

    98304:F5qLqDGkWPUQDfbcmZSf9wQjndFYCITWvfShrFzo4nHo4SpMp:FMmDIMQPmf/BwH5

Malware Config

Extracted

Family

nullmixer

C2

http://znegs.xyz/

Targets

    • Target

      1576d4a98acd0b02c7e2f145aeb6fd5e_JaffaCakes118

    • Size

      8.9MB

    • MD5

      1576d4a98acd0b02c7e2f145aeb6fd5e

    • SHA1

      ff5fa2b380b2e637d069d81a969361f79d1bb78d

    • SHA256

      fe0fd15683932ee4e275a3f63d8de80e54ad0a7f9be2ff3595bab0ec8da9fb1e

    • SHA512

      b7f038111b41c1f4176294b01818b0d25782a2d486f4fa320332b8fb32fc8f1d88320e40a1fed701f55735bc632dc55108f59d77e008d4731e85388f20cc81ae

    • SSDEEP

      98304:F5qLqDGkWPUQDfbcmZSf9wQjndFYCITWvfShrFzo4nHo4SpMp:FMmDIMQPmf/BwH5

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Socelars payload

MITRE ATT&CK Enterprise v15

Tasks