General

  • Target

    032cd0832e05ed59ea9b4dc500d5ae8b_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240427-nvzbsshg79

  • MD5

    032cd0832e05ed59ea9b4dc500d5ae8b

  • SHA1

    73186368f17410ae83c8ad5a1ba4a051d9742867

  • SHA256

    b32c829ebbc3410cf20b7c21cdd786d4a79de50e93a6a65a45d3f5bbce889f79

  • SHA512

    d4b228298493b1d5dc76322482348a0695f275c0d9a3812acdd56fdbabeb2b44621f9c9c13d6b2a8c983bb3dad8012de2c126fbbbf00bb0fccc3af35b9e23f89

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODosTigQytOFu:knw9oUUEEDlGUrMN5

Score
10/10

Malware Config

Targets

    • Target

      032cd0832e05ed59ea9b4dc500d5ae8b_JaffaCakes118

    • Size

      1.1MB

    • MD5

      032cd0832e05ed59ea9b4dc500d5ae8b

    • SHA1

      73186368f17410ae83c8ad5a1ba4a051d9742867

    • SHA256

      b32c829ebbc3410cf20b7c21cdd786d4a79de50e93a6a65a45d3f5bbce889f79

    • SHA512

      d4b228298493b1d5dc76322482348a0695f275c0d9a3812acdd56fdbabeb2b44621f9c9c13d6b2a8c983bb3dad8012de2c126fbbbf00bb0fccc3af35b9e23f89

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODosTigQytOFu:knw9oUUEEDlGUrMN5

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Tasks