Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08-01-2025 02:06

General

  • Target

    JaffaCakes118_854d8edf2f510eb6e806a152716beb44.exe

  • Size

    2.1MB

  • MD5

    854d8edf2f510eb6e806a152716beb44

  • SHA1

    7621ad71d8dd84dfe094fa497fb3964dc3527f93

  • SHA256

    5ae673394337414652628d1c8316e1de9022ccb740de062d4cb9d84c00def67f

  • SHA512

    ff37855cce1c0e1fe5d2e5c3cb499bfdcc2a9023100a3718c8c3742f13633b9e0403f219b8a80d2d73526b2d01e9e9f92e06f7925168778dfb5cc7215f2b1aef

  • SSDEEP

    24576:61WkHtYaYazCfatV4eiaVSRDotXkvOl3juQ55313N:61JVODoVxl3F

Score
10/10

Malware Config

Extracted

Family

nullmixer

C2

http://mooorni.xyz/

Signatures

  • NullMixer

    NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

  • Nullmixer family

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_854d8edf2f510eb6e806a152716beb44.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_854d8edf2f510eb6e806a152716beb44.exe"
    1⤵
      PID:2168

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2168-0-0x0000000000400000-0x000000000051C000-memory.dmp

      Filesize

      1.1MB