Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
08-12-2024 03:37
Behavioral task
behavioral1
Sample
d50f2affefc8e6b74d71ebde456205af_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d50f2affefc8e6b74d71ebde456205af_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d50f2affefc8e6b74d71ebde456205af_JaffaCakes118.exe
-
Size
8.2MB
-
MD5
d50f2affefc8e6b74d71ebde456205af
-
SHA1
90b7114547e3123f53ae471683960f92fc0eec1f
-
SHA256
33960eba7c214f99318c2f115e816214e76cadbc264b08671278acd116d601b5
-
SHA512
7702603329b91748d7255701782b735cd40decc02f671a9a37704228f7b2565e0e957eaac41a8f100f4ecc19409fcffd3f73787ef7bbef4e6ad7988d85e460d4
-
SSDEEP
98304:DTfbcmZ0c5YJ8lJhrFzo4nHo4SpM4Xd8bdFYCITWvfWf9wQav:Dfl5p3gN8Zw/f/s
Malware Config
Extracted
nullmixer
http://watira.xyz/
Signatures
-
Nullmixer family
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Privateloader family
-
Socelars family
-
Socelars payload 1 IoCs
resource yara_rule behavioral1/memory/2336-0-0x0000000000400000-0x0000000000B33000-memory.dmp family_socelars