Overview

overview

10

Static

static

10

f99ea5b4d4...18.exe

windows7-x64

10

f99ea5b4d4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f99ea5b4d446d20733e4af214e46e468_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240419-gcqhlsab77

  • MD5

    f99ea5b4d446d20733e4af214e46e468

  • SHA1

    61aa02db6d449e3a7e48e6444ca5cd4a1252d5a2

  • SHA256

    735a8faa01d9c722b3c1d61387947602255a29ae5dddb4ae4b1cffa9b07d1804

  • SHA512

    db4858d7c53e5b54c11341f5bef90ff4f6780400d8920a04330a6040c5fa3731475ad4b445beb277e85c43e8ce21d7c7da130a35a30569f550247ae4836a5aad

  • SSDEEP

    49152:gGS5jLBPhuL/tj/UbEeQt1DVa4OoXQFmd63jw:gGS5jL4jcges1DVLOlmd63

Score
10/10
gozixmrigisfbminerupx

Malware Config

Extracted

Family

gozi

Targets

    • Target

      f99ea5b4d446d20733e4af214e46e468_JaffaCakes118

    • Size

      1.5MB

    • MD5

      f99ea5b4d446d20733e4af214e46e468

    • SHA1

      61aa02db6d449e3a7e48e6444ca5cd4a1252d5a2

    • SHA256

      735a8faa01d9c722b3c1d61387947602255a29ae5dddb4ae4b1cffa9b07d1804

    • SHA512

      db4858d7c53e5b54c11341f5bef90ff4f6780400d8920a04330a6040c5fa3731475ad4b445beb277e85c43e8ce21d7c7da130a35a30569f550247ae4836a5aad

    • SSDEEP

      49152:gGS5jLBPhuL/tj/UbEeQt1DVa4OoXQFmd63jw:gGS5jL4jcges1DVLOlmd63

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks