Overview

overview

10

Static

static

10

6b15c8284c...kes118

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b15c8284cf910b60ebe73b9d7a1650a_JaffaCakes118

  • Size

    2.5MB

  • Sample

    240401-hsksqsge43

  • MD5

    6b15c8284cf910b60ebe73b9d7a1650a

  • SHA1

    f04e54de10c9713200e6582512ab21d0145ba3e1

  • SHA256

    a6d79e8de33e14b22fae06d4db8a3a93a606707f83a1aa367af04f516dcc1577

  • SHA512

    8423529217fdcce5adefbf08f1e1dbd7d4b56ae9e19c212c8aae8a32f87e42f7e35e09a451d22ed618c01f9be2d1aeba87adaa5e483915868b540c284d92b3c3

  • SSDEEP

    49152:oIgrtR1Vl3vrk0c6wOu4hMs9jvlOQhmRYSoXFIz9MZeaFquFUTf8CMGIDY9G:oIYtR1VK0c6wOu4PJ1wYTUACM2G

Score
10/10
xmrigxmrig_linuxantivmlinuxminer

Malware Config

Targets

    • Target

      6b15c8284cf910b60ebe73b9d7a1650a_JaffaCakes118

    • Size

      2.5MB

    • MD5

      6b15c8284cf910b60ebe73b9d7a1650a

    • SHA1

      f04e54de10c9713200e6582512ab21d0145ba3e1

    • SHA256

      a6d79e8de33e14b22fae06d4db8a3a93a606707f83a1aa367af04f516dcc1577

    • SHA512

      8423529217fdcce5adefbf08f1e1dbd7d4b56ae9e19c212c8aae8a32f87e42f7e35e09a451d22ed618c01f9be2d1aeba87adaa5e483915868b540c284d92b3c3

    • SSDEEP

      49152:oIgrtR1Vl3vrk0c6wOu4hMs9jvlOQhmRYSoXFIz9MZeaFquFUTf8CMGIDY9G:oIYtR1VK0c6wOu4PJ1wYTUACM2G

    Score
    10/10
    xmrig_linuxantivmminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • Changes its process name

    • Deletes itself

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

      antivm

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Reads CPU attributes

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks