Overview

overview

10

Static

static

10

0549166cb9...18.exe

windows7-x64

10

0549166cb9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0549166cb9fb0d47a28fd1e2926fcbd9_JaffaCakes118

  • Size

    1.6MB

  • MD5

    0549166cb9fb0d47a28fd1e2926fcbd9

  • SHA1

    da8bf3ce357cfc937b618dd682d2810f4b4a2649

  • SHA256

    2e570503ec46dc65f02bc11eab3c2c64c4bc30ec4563873bebbf203968100784

  • SHA512

    d349d338ff40a07b4ae558c92f79a26f37b0b55a9f325ef25748d2ff66e7a5bfc9b07508cae3fc72d0db70efc3366127fccdd5a3ab012c79c622dfba37e7b2df

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82Snl:NABS

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0549166cb9fb0d47a28fd1e2926fcbd9_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections