Overview

overview

10

Static

static

10

1645021b41...kes118

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1645021b413ad8a7e8c9ddb3fe0d8655_JaffaCakes118

  • Size

    5.5MB

  • Sample

    240329-c1fwvsfd81

  • MD5

    1645021b413ad8a7e8c9ddb3fe0d8655

  • SHA1

    a41531a3c9e11cb697aa5b801ef7218e7650b9fe

  • SHA256

    04b5e29283c60fcc255f8d2f289238430a10624e457f12f1bc866454110830a2

  • SHA512

    8b28422c18b25d1ab0b9f8578e91c25f6673cc87fcf07b3e743c190c01590e3b5a16fd75e4ec208c3199e437e595a27c04a01a443bb48d4f3d5685500ef61288

  • SSDEEP

    98304:xcs0sgKVVKMVKmGjEj/jM8MMM8MMMMMwMMwbvUvUvkGjrGjPjORF4PI31l/cUdVo:h0iG41OoHSaBaXTejEvbo

Score
10/10
xmrigxmrig_linuxantivmlinuxminer

Malware Config

Targets

    • Target

      1645021b413ad8a7e8c9ddb3fe0d8655_JaffaCakes118

    • Size

      5.5MB

    • MD5

      1645021b413ad8a7e8c9ddb3fe0d8655

    • SHA1

      a41531a3c9e11cb697aa5b801ef7218e7650b9fe

    • SHA256

      04b5e29283c60fcc255f8d2f289238430a10624e457f12f1bc866454110830a2

    • SHA512

      8b28422c18b25d1ab0b9f8578e91c25f6673cc87fcf07b3e743c190c01590e3b5a16fd75e4ec208c3199e437e595a27c04a01a443bb48d4f3d5685500ef61288

    • SSDEEP

      98304:xcs0sgKVVKMVKmGjEj/jM8MMM8MMMMMwMMwbvUvUvkGjrGjPjORF4PI31l/cUdVo:h0iG41OoHSaBaXTejEvbo

    Score
    10/10
    xmrig_linuxantivmminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

      antivm

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Reads CPU attributes

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2
T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

2
T1497

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks