Overview

overview

10

Static

static

10

01a9fb2d13...18.exe

windows7-x64

10

01a9fb2d13...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01a9fb2d13e5515c00d93ba93902d1d4_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240426-zyfveada9z

  • MD5

    01a9fb2d13e5515c00d93ba93902d1d4

  • SHA1

    c9a161a80280e6add147df6448a42b56aa764a53

  • SHA256

    419d0fb33b9bab52d3195e0f9af3f2f8fbd1a44db4545689018f00fc3afbb6bd

  • SHA512

    288fb102321ff273d00680db4871e02444303257f3ceefb96da0a615acf4fd19c474a6fdd9ff34581f2cdaf471a65ebeef88ee292cb96b18d1cc8611533aec56

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cRb2M:NABB

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      01a9fb2d13e5515c00d93ba93902d1d4_JaffaCakes118

    • Size

      2.2MB

    • MD5

      01a9fb2d13e5515c00d93ba93902d1d4

    • SHA1

      c9a161a80280e6add147df6448a42b56aa764a53

    • SHA256

      419d0fb33b9bab52d3195e0f9af3f2f8fbd1a44db4545689018f00fc3afbb6bd

    • SHA512

      288fb102321ff273d00680db4871e02444303257f3ceefb96da0a615acf4fd19c474a6fdd9ff34581f2cdaf471a65ebeef88ee292cb96b18d1cc8611533aec56

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cRb2M:NABB

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks