General

  • Target

    032092a77ae44fda8df84d4409f9e448_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240427-nbvt9shc77

  • MD5

    032092a77ae44fda8df84d4409f9e448

  • SHA1

    038392c060ec483669b4cf78a7e1f2ff8e2df45f

  • SHA256

    eec0778d538c7001c7ae42f56226e860fe28a17e5e928e0d49937784a9a14e9a

  • SHA512

    dfccda298c68fed7a919292d56ebf238f218b655a4232c97b3edfd0f1f98a560942f02f50b092ae615bd75ec81837096e2dead90d5b92089622e331076f2d3ba

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqEe:NABK

Score
10/10

Malware Config

Targets

    • Target

      032092a77ae44fda8df84d4409f9e448_JaffaCakes118

    • Size

      2.3MB

    • MD5

      032092a77ae44fda8df84d4409f9e448

    • SHA1

      038392c060ec483669b4cf78a7e1f2ff8e2df45f

    • SHA256

      eec0778d538c7001c7ae42f56226e860fe28a17e5e928e0d49937784a9a14e9a

    • SHA512

      dfccda298c68fed7a919292d56ebf238f218b655a4232c97b3edfd0f1f98a560942f02f50b092ae615bd75ec81837096e2dead90d5b92089622e331076f2d3ba

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqEe:NABK

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks