General

  • Target

    01712b0cb8e4e8444fbcff5acf202429_JaffaCakes118

  • Size

    1012KB

  • Sample

    240426-xmrresaa67

  • MD5

    01712b0cb8e4e8444fbcff5acf202429

  • SHA1

    61ab7722002a78a3b67e9e8891813ce52abd6f18

  • SHA256

    3c72b888745b8a9335ac3127419faaea6d5e9ef0317b6d9cb98637e62ed54eec

  • SHA512

    693ca9afde84a13f07fed75f3e05fb693eb0ecd2cf0c557fef21073fe6ac50d9bc209d9c5cc2707b48a373d934930e3bf63dea6d94cd259332ec21e017905f95

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqa7MZt3:knw9oUUEEDl37jcqa7Q

Score
10/10

Malware Config

Targets

    • Target

      01712b0cb8e4e8444fbcff5acf202429_JaffaCakes118

    • Size

      1012KB

    • MD5

      01712b0cb8e4e8444fbcff5acf202429

    • SHA1

      61ab7722002a78a3b67e9e8891813ce52abd6f18

    • SHA256

      3c72b888745b8a9335ac3127419faaea6d5e9ef0317b6d9cb98637e62ed54eec

    • SHA512

      693ca9afde84a13f07fed75f3e05fb693eb0ecd2cf0c557fef21073fe6ac50d9bc209d9c5cc2707b48a373d934930e3bf63dea6d94cd259332ec21e017905f95

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcqa7MZt3:knw9oUUEEDl37jcqa7Q

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Tasks