Overview

overview

10

Static

static

10

04bff3377f...18.exe

windows7-x64

10

04bff3377f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04bff3377f0a7320cb20d37f95a41248_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240428-j3zkbabf6x

  • MD5

    04bff3377f0a7320cb20d37f95a41248

  • SHA1

    e9cb554d50e0691e192968bb8c627fe9fb425ac6

  • SHA256

    55d5ba5e0d5ad42bc4b58a82c520f2cee37575737117cea617eedb8c25311e9e

  • SHA512

    82c82a4806bb6157efca47af17843b021e80c02d0fa3b3d91f08c8b0976ed15e3bc5688dcadfe2ece50179e6d837f5ff54d91d5b909088a69034f079f548dfe2

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9ceg:NABN

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      04bff3377f0a7320cb20d37f95a41248_JaffaCakes118

    • Size

      2.2MB

    • MD5

      04bff3377f0a7320cb20d37f95a41248

    • SHA1

      e9cb554d50e0691e192968bb8c627fe9fb425ac6

    • SHA256

      55d5ba5e0d5ad42bc4b58a82c520f2cee37575737117cea617eedb8c25311e9e

    • SHA512

      82c82a4806bb6157efca47af17843b021e80c02d0fa3b3d91f08c8b0976ed15e3bc5688dcadfe2ece50179e6d837f5ff54d91d5b909088a69034f079f548dfe2

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9ceg:NABN

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks