General

  • Target

    02a69c905ff752078b2a447927bcf894_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240427-hf3g1sdh2s

  • MD5

    02a69c905ff752078b2a447927bcf894

  • SHA1

    307c7f96046c0ab07bc7d42d987ef220385e0ff2

  • SHA256

    1eabc84b3fb9f181137536447b1da42a52e19e99c69fde53612411c07bd165af

  • SHA512

    2688ef4dcbdf9da84cb40810a941c28c5cc03b3318d833fb0d7921d5dd21315d46ba1e3139b288604d84d7f84849f758e5fdf6e744f547f856dc0d5ac472b7e3

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5I4TNrpDGKesKBZ5v:NAB/

Score
10/10

Malware Config

Targets

    • Target

      02a69c905ff752078b2a447927bcf894_JaffaCakes118

    • Size

      1.9MB

    • MD5

      02a69c905ff752078b2a447927bcf894

    • SHA1

      307c7f96046c0ab07bc7d42d987ef220385e0ff2

    • SHA256

      1eabc84b3fb9f181137536447b1da42a52e19e99c69fde53612411c07bd165af

    • SHA512

      2688ef4dcbdf9da84cb40810a941c28c5cc03b3318d833fb0d7921d5dd21315d46ba1e3139b288604d84d7f84849f758e5fdf6e744f547f856dc0d5ac472b7e3

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5I4TNrpDGKesKBZ5v:NAB/

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Command and Control

Web Service

1
T1102

Tasks