Overview

overview

10

Static

static

10

064061d68d...18.exe

windows7-x64

10

064061d68d...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    064061d68dd202d1147f540354fc59ee_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240428-2vrtlsbb93

  • MD5

    064061d68dd202d1147f540354fc59ee

  • SHA1

    8e4b4f446b2c2634695ebe503f6740c67f353941

  • SHA256

    ffe18c87676f1d96d5065ccac9a1ceccd34e1bfe88d3c9cb6e140b003a33bd7e

  • SHA512

    3fac5be2e97170cbcf11d473dab5910df06750bf5dc53def7e6042564acf44690ac0ccc054640637a8c29a4d852f2aff299d18de2c92803cd697becad2ea84f9

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UX:NABa

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      064061d68dd202d1147f540354fc59ee_JaffaCakes118

    • Size

      1.9MB

    • MD5

      064061d68dd202d1147f540354fc59ee

    • SHA1

      8e4b4f446b2c2634695ebe503f6740c67f353941

    • SHA256

      ffe18c87676f1d96d5065ccac9a1ceccd34e1bfe88d3c9cb6e140b003a33bd7e

    • SHA512

      3fac5be2e97170cbcf11d473dab5910df06750bf5dc53def7e6042564acf44690ac0ccc054640637a8c29a4d852f2aff299d18de2c92803cd697becad2ea84f9

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UX:NABa

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks