Overview

overview

10

Static

static

10

02a108352c...18.exe

windows7-x64

10

02a108352c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02a108352c9a131db982748c4ff460fd_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240427-g7wccach99

  • MD5

    02a108352c9a131db982748c4ff460fd

  • SHA1

    7da98278b04d515f9b49df9f3c471ab99a69741f

  • SHA256

    75e342ac036e04bcbc159fc7e5d49784aabb2a5a7a3e16524be173a78203c84a

  • SHA512

    088133a3aff88b169b8f2aafdd03ddbecba5ffebe2d209f29c1ee521bbd96ded4ab1775f3cdf3f14df16732f3808d0253bd109f86be2bc5ccd670edbf90cf2be

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1Zi:NAB7

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      02a108352c9a131db982748c4ff460fd_JaffaCakes118

    • Size

      1.9MB

    • MD5

      02a108352c9a131db982748c4ff460fd

    • SHA1

      7da98278b04d515f9b49df9f3c471ab99a69741f

    • SHA256

      75e342ac036e04bcbc159fc7e5d49784aabb2a5a7a3e16524be173a78203c84a

    • SHA512

      088133a3aff88b169b8f2aafdd03ddbecba5ffebe2d209f29c1ee521bbd96ded4ab1775f3cdf3f14df16732f3808d0253bd109f86be2bc5ccd670edbf90cf2be

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1Zi:NAB7

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks