General

  • Target

    a896dda6d16a20a50bfb381da76325c5_JaffaCakes118

  • Size

    8.9MB

  • Sample

    241127-taygnazmhw

  • MD5

    a896dda6d16a20a50bfb381da76325c5

  • SHA1

    6d46e1b61a7b4b7f6a4b481e877d1d2ea2b8c1b0

  • SHA256

    59cffafdaf2bad78f3cfe6b1d0b98b1fa215947805c2a24b1c773451b8b2e87f

  • SHA512

    1aecb1670ddcf07d84c46af536e536839b3987b27e8186e89d5c73a75ad9a6af7273d5556301f185f2a1a0b32556b33a95406ccf03294b1dec5fe57fe15a9825

  • SSDEEP

    98304:e74DcQ0wyfbcmZSf9wQjndFYCITWvfShrFzo4nHo4Spo1:eUwQUmf/BwHd

Malware Config

Extracted

Family

nullmixer

C2

http://marisana.xyz/

Targets

    • Target

      a896dda6d16a20a50bfb381da76325c5_JaffaCakes118

    • Size

      8.9MB

    • MD5

      a896dda6d16a20a50bfb381da76325c5

    • SHA1

      6d46e1b61a7b4b7f6a4b481e877d1d2ea2b8c1b0

    • SHA256

      59cffafdaf2bad78f3cfe6b1d0b98b1fa215947805c2a24b1c773451b8b2e87f

    • SHA512

      1aecb1670ddcf07d84c46af536e536839b3987b27e8186e89d5c73a75ad9a6af7273d5556301f185f2a1a0b32556b33a95406ccf03294b1dec5fe57fe15a9825

    • SSDEEP

      98304:e74DcQ0wyfbcmZSf9wQjndFYCITWvfShrFzo4nHo4Spo1:eUwQUmf/BwHd

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • Nullmixer family

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • Privateloader family

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Socelars family

    • Socelars payload

MITRE ATT&CK Enterprise v15

Tasks