Overview

overview

10

Static

static

10

000b1c87a0...18.exe

windows7-x64

10

000b1c87a0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    000b1c87a054e01946aff896667c8acf_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240425-zlh41aee6x

  • MD5

    000b1c87a054e01946aff896667c8acf

  • SHA1

    0ec568bf3a5da9f34def737004d2b202d34f8d53

  • SHA256

    f9bca5231c34648f34e4d92299aec98de9a6dae4477a54c791a53a68daffa2d5

  • SHA512

    4130266636786012fc8d9964b306d905926f3a268f023f38aefd71c82a89ac142d0cffa95f32bf3fbe72b4c8f2c3beb4d20cff96106eab796eaa36ccd33daf4c

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//aD5:NABI

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      000b1c87a054e01946aff896667c8acf_JaffaCakes118

    • Size

      2.3MB

    • MD5

      000b1c87a054e01946aff896667c8acf

    • SHA1

      0ec568bf3a5da9f34def737004d2b202d34f8d53

    • SHA256

      f9bca5231c34648f34e4d92299aec98de9a6dae4477a54c791a53a68daffa2d5

    • SHA512

      4130266636786012fc8d9964b306d905926f3a268f023f38aefd71c82a89ac142d0cffa95f32bf3fbe72b4c8f2c3beb4d20cff96106eab796eaa36ccd33daf4c

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//aD5:NABI

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks