Overview

overview

10

Static

static

10

029fa133e8...18.exe

windows7-x64

10

029fa133e8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    029fa133e88d21bd6b0ce8a5adb8b88b_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240427-g5x36ade8t

  • MD5

    029fa133e88d21bd6b0ce8a5adb8b88b

  • SHA1

    e0e9bb50d6533df1f5ab43a56a2089467a453f4a

  • SHA256

    7324d6d61de6c99368d4aa4694de78250e967ae06956b50d0556f2f9e933b42e

  • SHA512

    da3941f7a3c11677e6064944e2834ff559962b6319e3637f6125c29615038e5f6806ce8fe80817bf60dc5683e2fa2596c71997426a746f05c111bd75a22ecd7a

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKvd:NABc

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      029fa133e88d21bd6b0ce8a5adb8b88b_JaffaCakes118

    • Size

      1.7MB

    • MD5

      029fa133e88d21bd6b0ce8a5adb8b88b

    • SHA1

      e0e9bb50d6533df1f5ab43a56a2089467a453f4a

    • SHA256

      7324d6d61de6c99368d4aa4694de78250e967ae06956b50d0556f2f9e933b42e

    • SHA512

      da3941f7a3c11677e6064944e2834ff559962b6319e3637f6125c29615038e5f6806ce8fe80817bf60dc5683e2fa2596c71997426a746f05c111bd75a22ecd7a

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKvd:NABc

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks