General

  • Target

    037bc5544581ee6d2bbe954ef97b1945_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240427-yffk9afd81

  • MD5

    037bc5544581ee6d2bbe954ef97b1945

  • SHA1

    6f3955b84d2d50692d65814f055e7794cae19673

  • SHA256

    7bcb5886474c2e197dc1eb5c7c4c7c61581d0727d0aceca78a83afa8711c6ac2

  • SHA512

    4d8e35ccd1287f87168c48b77ff46c0fead3cb97e17712f5b4095ea16c34e2cbff04aa5a9dc92a78b3d4b66377d71210fa677a06d6649e6b5b4a2773e461f16a

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U16De:NABG

Score
10/10

Malware Config

Targets

    • Target

      037bc5544581ee6d2bbe954ef97b1945_JaffaCakes118

    • Size

      2.0MB

    • MD5

      037bc5544581ee6d2bbe954ef97b1945

    • SHA1

      6f3955b84d2d50692d65814f055e7794cae19673

    • SHA256

      7bcb5886474c2e197dc1eb5c7c4c7c61581d0727d0aceca78a83afa8711c6ac2

    • SHA512

      4d8e35ccd1287f87168c48b77ff46c0fead3cb97e17712f5b4095ea16c34e2cbff04aa5a9dc92a78b3d4b66377d71210fa677a06d6649e6b5b4a2773e461f16a

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U16De:NABG

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks