General

  • Target

    020e72d3be23a09129f3747b3e257ec6_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240427-bc823afe89

  • MD5

    020e72d3be23a09129f3747b3e257ec6

  • SHA1

    facf8a803d8ee0f5c3169ed2524ca4846a1bf34d

  • SHA256

    d97a8e5abb58a90b4d552b377ff0a094b4922da2d0aa941f0180a3a098dc7b39

  • SHA512

    697ba0976ca438a92604dd11fa521011108d30fef0d4c5f45459d6e2e2b84d7b6a4fbc553e549ecaea349551284dc6d62125b0b65a55dbeb2fce9525e802d17b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrI5s:NAB2

Score
10/10

Malware Config

Targets

    • Target

      020e72d3be23a09129f3747b3e257ec6_JaffaCakes118

    • Size

      1.8MB

    • MD5

      020e72d3be23a09129f3747b3e257ec6

    • SHA1

      facf8a803d8ee0f5c3169ed2524ca4846a1bf34d

    • SHA256

      d97a8e5abb58a90b4d552b377ff0a094b4922da2d0aa941f0180a3a098dc7b39

    • SHA512

      697ba0976ca438a92604dd11fa521011108d30fef0d4c5f45459d6e2e2b84d7b6a4fbc553e549ecaea349551284dc6d62125b0b65a55dbeb2fce9525e802d17b

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrI5s:NAB2

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks