Overview

overview

10

Static

static

10

0043363217...18.exe

windows7-x64

10

0043363217...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00433632175846b8347bfb80fe033552_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240426-h49w1abe76

  • MD5

    00433632175846b8347bfb80fe033552

  • SHA1

    a100b0fc7cbf6a98a4e8ca422789a91cde78abb3

  • SHA256

    a6bf9a2fa53136b1da0bbf5646906265e479148ba37ea633fa3c5fd5974b2e9a

  • SHA512

    3ce0ab8fbdc404df8f18bd39a075e5cacb8f61e80312f5828c116164ac336c511239cc298c76d8e9a589f80ab5e8ed015f8e933dedcd6a085396ddfe96256695

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOh:NABo

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      00433632175846b8347bfb80fe033552_JaffaCakes118

    • Size

      1.8MB

    • MD5

      00433632175846b8347bfb80fe033552

    • SHA1

      a100b0fc7cbf6a98a4e8ca422789a91cde78abb3

    • SHA256

      a6bf9a2fa53136b1da0bbf5646906265e479148ba37ea633fa3c5fd5974b2e9a

    • SHA512

      3ce0ab8fbdc404df8f18bd39a075e5cacb8f61e80312f5828c116164ac336c511239cc298c76d8e9a589f80ab5e8ed015f8e933dedcd6a085396ddfe96256695

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOh:NABo

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks