General

  • Target

    04f1de717bbad5da61255559808ebd93_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240428-l37l2adb75

  • MD5

    04f1de717bbad5da61255559808ebd93

  • SHA1

    cfa447d97fea312f1f30902aaaecf1ad6d8ac6cf

  • SHA256

    dd43da5b097ab5ba14e636da2edac9e2cdf2f0faf8b83df4f35207ca76d80d63

  • SHA512

    18d808636913b96aef4571a350af23eb7e56a8965a29c5d7a96782d175eb7fd12a66252da232b5e6e70fc8d85b9fb4e5fd7eaf40cf79d3f515c634e2de981610

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1uT:NAB/

Score
10/10

Malware Config

Targets

    • Target

      04f1de717bbad5da61255559808ebd93_JaffaCakes118

    • Size

      1.9MB

    • MD5

      04f1de717bbad5da61255559808ebd93

    • SHA1

      cfa447d97fea312f1f30902aaaecf1ad6d8ac6cf

    • SHA256

      dd43da5b097ab5ba14e636da2edac9e2cdf2f0faf8b83df4f35207ca76d80d63

    • SHA512

      18d808636913b96aef4571a350af23eb7e56a8965a29c5d7a96782d175eb7fd12a66252da232b5e6e70fc8d85b9fb4e5fd7eaf40cf79d3f515c634e2de981610

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1uT:NAB/

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks