General

  • Target

    00bd07546d0f5634f9028ba57e0696b3_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240426-pbj87sbd35

  • MD5

    00bd07546d0f5634f9028ba57e0696b3

  • SHA1

    4b72270af7c4b500cf157e3f4d48acc7a408e806

  • SHA256

    c1b016ab17b62cb2bb64cf462853a1f3cb3a53206714f06dd6e1dc9f22def01d

  • SHA512

    687b46346b56b4c207c9f6ce20c23cb469ac5f6ee11f418128527704f02888dd03687c32f00668f28289df28ef6a6a110d6938f1cfb51fa0a946d4fc61ed61cd

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqL:NAB8

Score
10/10

Malware Config

Targets

    • Target

      00bd07546d0f5634f9028ba57e0696b3_JaffaCakes118

    • Size

      2.3MB

    • MD5

      00bd07546d0f5634f9028ba57e0696b3

    • SHA1

      4b72270af7c4b500cf157e3f4d48acc7a408e806

    • SHA256

      c1b016ab17b62cb2bb64cf462853a1f3cb3a53206714f06dd6e1dc9f22def01d

    • SHA512

      687b46346b56b4c207c9f6ce20c23cb469ac5f6ee11f418128527704f02888dd03687c32f00668f28289df28ef6a6a110d6938f1cfb51fa0a946d4fc61ed61cd

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqL:NAB8

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks