Overview

overview

10

Static

static

10

0472db879a...18.exe

windows7-x64

10

0472db879a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0472db879aa840bacef4d5757117dadf_JaffaCakes118

  • Size

    1.6MB

  • MD5

    0472db879aa840bacef4d5757117dadf

  • SHA1

    6d1b70465c1e10020afd8d943077f1ec1a5ff2bd

  • SHA256

    e62edfc0fe10088237b3db8a56ea8a7188985ae64c1135bdb7c22f797a08731e

  • SHA512

    abdacb6613cc92889715d25e718d5297736e10c15808d87cbcd8d57b75ea46bc834f2d1d462b55b8ccab35e4c28f0abe50b53c5ec9055500b7143772040be792

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfULfVYpk+P:knw9oUUEEDlGUjc2HhG82DiGVIJ

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0472db879aa840bacef4d5757117dadf_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections