Overview

overview

10

Static

static

10

01682609f9...18.exe

windows7-x64

10

01682609f9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01682609f9655af62c18f472a34f422b_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240426-w83kdahf79

  • MD5

    01682609f9655af62c18f472a34f422b

  • SHA1

    7bd5b326246283e84ca71a1e1692f50ea7065d83

  • SHA256

    099061c7ccd0cf7e7309c3c2803057db64b20c390d69a26712620fdfb08a34a0

  • SHA512

    6b8abb282ad8df8edb054ac9057397c223448ca24f7f6d78396dff34589d85b434e4a84cd5e8ed268d8a14b2ff678190399db4f3ff162cdc36f1d5a2310e3726

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1B:NABK

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      01682609f9655af62c18f472a34f422b_JaffaCakes118

    • Size

      1.9MB

    • MD5

      01682609f9655af62c18f472a34f422b

    • SHA1

      7bd5b326246283e84ca71a1e1692f50ea7065d83

    • SHA256

      099061c7ccd0cf7e7309c3c2803057db64b20c390d69a26712620fdfb08a34a0

    • SHA512

      6b8abb282ad8df8edb054ac9057397c223448ca24f7f6d78396dff34589d85b434e4a84cd5e8ed268d8a14b2ff678190399db4f3ff162cdc36f1d5a2310e3726

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1B:NABK

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks