Overview

overview

10

Static

static

10

034597b25c...18.exe

windows7-x64

10

034597b25c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    034597b25c141d8da9ebb619896b65bf_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240427-pxdnjsag26

  • MD5

    034597b25c141d8da9ebb619896b65bf

  • SHA1

    fb8cda6cfb7c0ff271d78ad91cb8469f19a97136

  • SHA256

    a23a8fc204625b50d0a06855f1da710de8dfcf6d9ac2347bd058670ce8587ce0

  • SHA512

    79a23027556385cb00597afabdbdfacf86e596df3bb0dcc940259601071e33bf48c48737e4f04fa6580c051f94a535706f73aa15e1e1f2b16242825c7bc9a1dd

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p1HzDgU4:NAB4

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      034597b25c141d8da9ebb619896b65bf_JaffaCakes118

    • Size

      1.7MB

    • MD5

      034597b25c141d8da9ebb619896b65bf

    • SHA1

      fb8cda6cfb7c0ff271d78ad91cb8469f19a97136

    • SHA256

      a23a8fc204625b50d0a06855f1da710de8dfcf6d9ac2347bd058670ce8587ce0

    • SHA512

      79a23027556385cb00597afabdbdfacf86e596df3bb0dcc940259601071e33bf48c48737e4f04fa6580c051f94a535706f73aa15e1e1f2b16242825c7bc9a1dd

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p1HzDgU4:NAB4

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks