General
- Target JJSploit
- Size 23KB
- Sample260828-yj12cssgjf
- SHA256 97a742a1024e2b7a2ca864dd85dd5b880e06552fe0b28ca752f50ab9d8afa268
- MD5 e12674d7a89811470816a1cfb9b3e466
- SHA1 9cda56413675d6cac870574ca50b54e014765c1d
- SHA512 4fe3568fd9396dc7340df998dd42c25a718760564b0d83712661a0903c70681652b67bad47a12ea5b60ccc0709d5d5ebca69bddd6f835c273855f6eefa9b646e
- SSDEEP 384:xpV/idXM2ejRwUeUIXUU8SEiPMKvJWDWigqWia03StSimSiYSiIzWBlEqz1I2ZEB:xpV/i9M2eOfvXqS5PHvJingqna03O7mr
- TLSH T118B2081B75ED1EB7029351A56C622288FA7B003FDB0564B1F9FE819C0F90F898A675DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
JJSploit.html
Resource
win10v2004-20260513-en
21 signatures
900 seconds
Behavioral task
behavioral2
Sample
JJSploit.html
Resource
win11ltsc2024-20260709-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target JJSploit
- Size 23KB
- SHA256 97a742a1024e2b7a2ca864dd85dd5b880e06552fe0b28ca752f50ab9d8afa268
- MD5 e12674d7a89811470816a1cfb9b3e466
- SHA1 9cda56413675d6cac870574ca50b54e014765c1d
- SHA512 4fe3568fd9396dc7340df998dd42c25a718760564b0d83712661a0903c70681652b67bad47a12ea5b60ccc0709d5d5ebca69bddd6f835c273855f6eefa9b646e
- SSDEEP 384:xpV/idXM2ejRwUeUIXUU8SEiPMKvJWDWigqWia03StSimSiYSiIzWBlEqz1I2ZEB:xpV/i9M2eOfvXqS5PHvJingqna03O7mr
- TLSH T118B2081B75ED1EB7029351A56C622288FA7B003FDB0564B1F9FE819C0F90F898A675DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.