General

  • Target

    512e7c6981a3c5a4fe65a4b2ae42cb75_JaffaCakes118

  • Size

    4.2MB

  • Sample

    241017-h96rja1clk

  • MD5

    512e7c6981a3c5a4fe65a4b2ae42cb75

  • SHA1

    87bee758506ae4e22c221b65aaa47b697404a2c6

  • SHA256

    61a8b4929b9b61411b8af256cb4d1813ab80fca153e6edb18990959496c52a94

  • SHA512

    abd324760aecfac9decdd1883e75f4f22d9693e39d6a7dd395f64d12db2c8a6cf869574d7cd2848af02ad45269ba9c161dc99c4cbdf9ff0e430eeb435e925f52

  • SSDEEP

    49152:vzOaApl876oK3E0eBJJEunCiNkNw0Iqnoz6jnEl3k:v4cYGBJMNNBo+L

Malware Config

Extracted

Family

nullmixer

C2

http://watira.xyz/

Targets

    • Target

      512e7c6981a3c5a4fe65a4b2ae42cb75_JaffaCakes118

    • Size

      4.2MB

    • MD5

      512e7c6981a3c5a4fe65a4b2ae42cb75

    • SHA1

      87bee758506ae4e22c221b65aaa47b697404a2c6

    • SHA256

      61a8b4929b9b61411b8af256cb4d1813ab80fca153e6edb18990959496c52a94

    • SHA512

      abd324760aecfac9decdd1883e75f4f22d9693e39d6a7dd395f64d12db2c8a6cf869574d7cd2848af02ad45269ba9c161dc99c4cbdf9ff0e430eeb435e925f52

    • SSDEEP

      49152:vzOaApl876oK3E0eBJJEunCiNkNw0Iqnoz6jnEl3k:v4cYGBJMNNBo+L

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

MITRE ATT&CK Enterprise v15

Tasks