Overview

overview

10

Static

static

10

05051215c7...18.exe

windows7-x64

10

05051215c7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05051215c7e79e7cc7b74495f1c5ceee_JaffaCakes118

  • Size

    2.8MB

  • Sample

    240428-mwb28aec3t

  • MD5

    05051215c7e79e7cc7b74495f1c5ceee

  • SHA1

    68358af51f46dd0c1fb9bca2bc1f9199cb219956

  • SHA256

    0d99c5fee79a4176dae3440ba2d8aece8ef19ad1322f9b92647d4b1fcb6d5872

  • SHA512

    fe9e87be51d5a1e4a886fe3d40f94724c748525673752f094b90489c93f0f76d6f5efe2d42e62f5235bda529559009b24e1812238bce68c263f78f398149f5a2

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5I/Kh+V:NABa

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      05051215c7e79e7cc7b74495f1c5ceee_JaffaCakes118

    • Size

      2.8MB

    • MD5

      05051215c7e79e7cc7b74495f1c5ceee

    • SHA1

      68358af51f46dd0c1fb9bca2bc1f9199cb219956

    • SHA256

      0d99c5fee79a4176dae3440ba2d8aece8ef19ad1322f9b92647d4b1fcb6d5872

    • SHA512

      fe9e87be51d5a1e4a886fe3d40f94724c748525673752f094b90489c93f0f76d6f5efe2d42e62f5235bda529559009b24e1812238bce68c263f78f398149f5a2

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5I/Kh+V:NABa

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks