Overview

overview

10

Static

static

10

02866431cd...18.exe

windows7-x64

10

02866431cd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02866431cd044e1c3595078de2cd7532_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240427-f4nyescg8y

  • MD5

    02866431cd044e1c3595078de2cd7532

  • SHA1

    36f8ad7f7b985e6498ad3741082c618cecb60897

  • SHA256

    1391efaf4bee41e55d65fd0f3ea0c1c2b7aee7c33f77d9c2c193cd27a6aa4d8c

  • SHA512

    398e2fc65cf5d29f8cd3649d96bd6bde27e7999f7d2913e5b204c260ab0c7812b63f63b509cc8db391495ebed35df07d1b0a434851618173f7ecae009cfbfa6c

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtW:Lz071uv4BPMkibTIA5I4TNrpDGgDQz2

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      02866431cd044e1c3595078de2cd7532_JaffaCakes118

    • Size

      1.7MB

    • MD5

      02866431cd044e1c3595078de2cd7532

    • SHA1

      36f8ad7f7b985e6498ad3741082c618cecb60897

    • SHA256

      1391efaf4bee41e55d65fd0f3ea0c1c2b7aee7c33f77d9c2c193cd27a6aa4d8c

    • SHA512

      398e2fc65cf5d29f8cd3649d96bd6bde27e7999f7d2913e5b204c260ab0c7812b63f63b509cc8db391495ebed35df07d1b0a434851618173f7ecae009cfbfa6c

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtW:Lz071uv4BPMkibTIA5I4TNrpDGgDQz2

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks