General
-
Target
e6236057997da55d7340be7c9d3596f2_JaffaCakes118
-
Size
5.2MB
-
Sample
241212-nf9h8avjhl
-
MD5
e6236057997da55d7340be7c9d3596f2
-
SHA1
ad27cc3cc3336a5bc5e5c053080ebbd413ce4ae7
-
SHA256
3f7f250161f39931babce508158790a0383a1bb43976083c2bdda6f25519925e
-
SHA512
72a8b53a24c49d2939e747dac3ee92f0eb69ec98181edfe1c9bb7a4a4fa484e90718a1648b1669982f24d520a1f73d8a466fdf1aeb13aab905b54b47a5d87359
-
SSDEEP
49152:k95CC17bBQxC/wTW2owTh8fpSKcpMAHp9lqiT8rIO0s3Sm+KLZCk4DWCMl3k:kbdFYCITWvffAHVT8rEsCm+Kwqw
Behavioral task
behavioral1
Sample
e6236057997da55d7340be7c9d3596f2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e6236057997da55d7340be7c9d3596f2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
nullmixer
http://watira.xyz/
Targets
-
-
Target
e6236057997da55d7340be7c9d3596f2_JaffaCakes118
-
Size
5.2MB
-
MD5
e6236057997da55d7340be7c9d3596f2
-
SHA1
ad27cc3cc3336a5bc5e5c053080ebbd413ce4ae7
-
SHA256
3f7f250161f39931babce508158790a0383a1bb43976083c2bdda6f25519925e
-
SHA512
72a8b53a24c49d2939e747dac3ee92f0eb69ec98181edfe1c9bb7a4a4fa484e90718a1648b1669982f24d520a1f73d8a466fdf1aeb13aab905b54b47a5d87359
-
SSDEEP
49152:k95CC17bBQxC/wTW2owTh8fpSKcpMAHp9lqiT8rIO0s3Sm+KLZCk4DWCMl3k:kbdFYCITWvffAHVT8rEsCm+Kwqw
Score10/10-
Nullmixer family
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Privateloader family
-