General

  • Target

    0235add2109410f281e035e189b97f0a_JaffaCakes118

  • Size

    1.6MB

  • Sample

    240427-cyldkahc24

  • MD5

    0235add2109410f281e035e189b97f0a

  • SHA1

    663da68804f2a3ab5a38ad42c3075e9074291ff3

  • SHA256

    e00a7a66095d6442c8859492b627fad5b2387a050a2309afbb3cd15427cd7b7b

  • SHA512

    51f2e52b7de55ba258030ed4279aa70b3ea637daa6c38d645365f98611c278ccdef650533d23d2c37b8ca7cda19e634d3c8cdc15a1e99a1f7ddb500d52f836e3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOdg9fU8NGa4:knw9oUUEEDlGUh+hN8/4

Score
10/10

Malware Config

Targets

    • Target

      0235add2109410f281e035e189b97f0a_JaffaCakes118

    • Size

      1.6MB

    • MD5

      0235add2109410f281e035e189b97f0a

    • SHA1

      663da68804f2a3ab5a38ad42c3075e9074291ff3

    • SHA256

      e00a7a66095d6442c8859492b627fad5b2387a050a2309afbb3cd15427cd7b7b

    • SHA512

      51f2e52b7de55ba258030ed4279aa70b3ea637daa6c38d645365f98611c278ccdef650533d23d2c37b8ca7cda19e634d3c8cdc15a1e99a1f7ddb500d52f836e3

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOdg9fU8NGa4:knw9oUUEEDlGUh+hN8/4

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Tasks