Overview

overview

10

Static

static

10

052a62c50b...18.exe

windows7-x64

10

052a62c50b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    052a62c50b08c8b53aecbd43689bee83_JaffaCakes118

  • Size

    1.9MB

  • MD5

    052a62c50b08c8b53aecbd43689bee83

  • SHA1

    df360bd44af8ebd162093b9e7baeb2ee5cfcb398

  • SHA256

    72f1e09fb869e2fbef06336c2db0f5127bc91ebb8a9f66c02e30b53f1c3039df

  • SHA512

    6aa7cb3d832bc41c996de0739a1feb29d2b93de362cbb2308c4228b4ca42a71164857aa0286f199fb5f59049c54f7c9804b36aad749beedacf07969a419ce352

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UGw:NABg

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 052a62c50b08c8b53aecbd43689bee83_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections