General

  • Target

    53fcd3b82e43e97f0917d125f257f235_JaffaCakes118

  • Size

    6.8MB

  • Sample

    241017-1395gssfqp

  • MD5

    53fcd3b82e43e97f0917d125f257f235

  • SHA1

    e512cec1d2ccdf8e321a9d98ae905eba7845b20e

  • SHA256

    7a0846b418e135ed6b772f7518b5ec2f73cff221174aed757a8bd3afacfb9424

  • SHA512

    af71beba40a4e2e3b047a1fa478ccb3af74dbb47635c57efd8a76afc597a4ad48d455b08ea8ae8377d93414ef78d4437f57afe7301a6ce1f524f4b8881296ce9

  • SSDEEP

    98304:4Cf9wQUlXfbcmZ68grGUmdFYCITWvf94I:4Cf/U5OdyUSwyD

Malware Config

Extracted

Family

nullmixer

C2

http://watira.xyz/

Targets

    • Target

      53fcd3b82e43e97f0917d125f257f235_JaffaCakes118

    • Size

      6.8MB

    • MD5

      53fcd3b82e43e97f0917d125f257f235

    • SHA1

      e512cec1d2ccdf8e321a9d98ae905eba7845b20e

    • SHA256

      7a0846b418e135ed6b772f7518b5ec2f73cff221174aed757a8bd3afacfb9424

    • SHA512

      af71beba40a4e2e3b047a1fa478ccb3af74dbb47635c57efd8a76afc597a4ad48d455b08ea8ae8377d93414ef78d4437f57afe7301a6ce1f524f4b8881296ce9

    • SSDEEP

      98304:4Cf9wQUlXfbcmZ68grGUmdFYCITWvf94I:4Cf/U5OdyUSwyD

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

MITRE ATT&CK Enterprise v15

Tasks