General

  • Target

    0387042d9873631c497facab1c4dc713_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240427-ywq2xsfg9w

  • MD5

    0387042d9873631c497facab1c4dc713

  • SHA1

    cf62dadf9de01812f256ec49a86631d62a97a040

  • SHA256

    5920a7246c7df48f70c45077705f6d5e84b52f9f5494f47bd06517d1a9681743

  • SHA512

    da3030702d27f44ba75880a03cdddebbcd51a75f148ca29dbaa2a3577c4085574e65c5f96dba003e53732ac725550514e7767ecc6d06c9dbb30cd6f0794d6b76

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKI:NABH

Score
10/10

Malware Config

Targets

    • Target

      0387042d9873631c497facab1c4dc713_JaffaCakes118

    • Size

      1.7MB

    • MD5

      0387042d9873631c497facab1c4dc713

    • SHA1

      cf62dadf9de01812f256ec49a86631d62a97a040

    • SHA256

      5920a7246c7df48f70c45077705f6d5e84b52f9f5494f47bd06517d1a9681743

    • SHA512

      da3030702d27f44ba75880a03cdddebbcd51a75f148ca29dbaa2a3577c4085574e65c5f96dba003e53732ac725550514e7767ecc6d06c9dbb30cd6f0794d6b76

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKI:NABH

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks