Overview

overview

10

Static

static

10

0230f457a9...18.exe

windows7-x64

10

0230f457a9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0230f457a9f909a0329571a57fd73a83_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240427-cqldlahh41

  • MD5

    0230f457a9f909a0329571a57fd73a83

  • SHA1

    74407f02f44a8e394493c3f5cc298b521ef1bda2

  • SHA256

    480fcec89a556760141d5915f00ac58f54b4688b3c7c4ab87ec338952a83f3c0

  • SHA512

    52289d22384617068a8675b2c09ecb2b22e2c094bc3f0fc42211b14a1d1e8957a8e9fa413213343460da68606f61f2e68a0e2125db4fef975495589573a9d89d

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UOp:NABv

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      0230f457a9f909a0329571a57fd73a83_JaffaCakes118

    • Size

      1.9MB

    • MD5

      0230f457a9f909a0329571a57fd73a83

    • SHA1

      74407f02f44a8e394493c3f5cc298b521ef1bda2

    • SHA256

      480fcec89a556760141d5915f00ac58f54b4688b3c7c4ab87ec338952a83f3c0

    • SHA512

      52289d22384617068a8675b2c09ecb2b22e2c094bc3f0fc42211b14a1d1e8957a8e9fa413213343460da68606f61f2e68a0e2125db4fef975495589573a9d89d

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UOp:NABv

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks