General

  • Target

    016718ad79d8b5c4575636692d5965a6_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240426-w7zr4ahf56

  • MD5

    016718ad79d8b5c4575636692d5965a6

  • SHA1

    7e25f9dceb24b0728487de349a8033e0e7e102b1

  • SHA256

    f31fad425ac3ad9339b3641106fe2e13d4129384bff61cd21fb4189cf6634635

  • SHA512

    53755378af545a5a8be3f7f3ab154e2f88777e15a2f201b56c289233197100f6933593f39499b71fbba179a1a2bc9323bd61e0824813299d36fabf6329b9be08

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqM:NABz

Score
10/10

Malware Config

Targets

    • Target

      016718ad79d8b5c4575636692d5965a6_JaffaCakes118

    • Size

      2.3MB

    • MD5

      016718ad79d8b5c4575636692d5965a6

    • SHA1

      7e25f9dceb24b0728487de349a8033e0e7e102b1

    • SHA256

      f31fad425ac3ad9339b3641106fe2e13d4129384bff61cd21fb4189cf6634635

    • SHA512

      53755378af545a5a8be3f7f3ab154e2f88777e15a2f201b56c289233197100f6933593f39499b71fbba179a1a2bc9323bd61e0824813299d36fabf6329b9be08

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqM:NABz

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Command and Control

Web Service

1
T1102

Tasks