xmrig | e994582186041cbf471ff2b5bdfcde3fa3034b3c2fb2c0969f09e409e5d091ea | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

0264e9dedc...18.exe

windows7-x64

0264e9dedc...18.exe

windows10-2004-x64

Sharing

General

Target

0264e9dedce55ca6ab3139705ab8756c_JaffaCakes118
Size

2.1MB
Sample

240427-esz1waag28
MD5

0264e9dedce55ca6ab3139705ab8756c
SHA1

ed378d7d5ce4f5e832763fb2fdf4f21719a8536f
SHA256

e994582186041cbf471ff2b5bdfcde3fa3034b3c2fb2c0969f09e409e5d091ea
SHA512

4d908af5e182d0506775ef1aaa811c2a4e6a2415a31620481bc15e5789c11ebfa7f91c7d813649ce30e6aaccee1d6f92ca283b9e05e3790e9ddaa023fd3159b4
SSDEEP

49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafws1PZ:NABQ

Score

10^/10

xmrig miner upx

Static task

static1

upx miner xmrig

4 signatures

Behavioral task

behavioral1

Sample

0264e9dedce55ca6ab3139705ab8756c_JaffaCakes118.exe

Resource

win7-20240419-en

xmrig miner upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

0264e9dedce55ca6ab3139705ab8756c_JaffaCakes118.exe

Resource

win10v2004-20240426-en

xmrig miner upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  0264e9dedce55ca6ab3139705ab8756c_JaffaCakes118
- Size
  
  2.1MB
- MD5
  
  0264e9dedce55ca6ab3139705ab8756c
- SHA1
  
  ed378d7d5ce4f5e832763fb2fdf4f21719a8536f
- SHA256
  
  e994582186041cbf471ff2b5bdfcde3fa3034b3c2fb2c0969f09e409e5d091ea
- SHA512
  
  4d908af5e182d0506775ef1aaa811c2a4e6a2415a31620481bc15e5789c11ebfa7f91c7d813649ce30e6aaccee1d6f92ca283b9e05e3790e9ddaa023fd3159b4
- SSDEEP
  
  49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafws1PZ:NABQ
Score

10^/10

xmrig miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Blocklisted process makes network request
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.