Overview

overview

10

Static

static

10

JaffaCakes...c4.exe

windows7-x64

10

JaffaCakes...c4.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2024 17:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JaffaCakes118_2b9a59ff143e484f67b3cb1d19a598c4.exe

  • Size

    2.1MB

  • MD5

    2b9a59ff143e484f67b3cb1d19a598c4

  • SHA1

    3ec289923285465d1331c1cba3fef420c3393b63

  • SHA256

    fdbef9022773610fe53a42eb98c7ebe842f71323731a909af330fac77e7edbe4

  • SHA512

    ec5079b1f000958e8a92ad9f4779d817655c1163b9334d06c3de686537339d28ccec54421a04addc66502c4c04e3c3fee986bb8500cbbf5aec4e128d56e67dc8

  • SSDEEP

    24576:3yS+b4YnYTYSfPJT5WviHeFHN1O6UPZacqfl3juQ55313N:3y3VXNA9efl3F

Score
10/10
nullmixerdropper

Malware Config

Extracted

Family

nullmixer

C2

http://hsiens.xyz/

Signatures

  • NullMixer

    NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    droppernullmixer
  • Nullmixer family
    nullmixer

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2b9a59ff143e484f67b3cb1d19a598c4.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2b9a59ff143e484f67b3cb1d19a598c4.exe"
    1⤵
      PID:2088

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2088-0-0x0000000000400000-0x000000000051C000-memory.dmp

      Filesize

      1.1MB

      Download