Overview

overview

10

Static

static

10

0570ab2449...18.exe

windows7-x64

10

0570ab2449...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0570ab2449bcc2cb0df5ce775e8765a4_JaffaCakes118

  • Size

    1.4MB

  • MD5

    0570ab2449bcc2cb0df5ce775e8765a4

  • SHA1

    f36843125495f48b87d0f2154c586aa81150e885

  • SHA256

    0248e0e1c9c6138bd8ab5799fc04c5568dcc6f5061a7f77d1d4d11a9d918198e

  • SHA512

    1bed02cbd71f5c4a107b29785b1ffa54694851827be8e9afca076c5aadf009a073007b03b0d17b0fcb3c84441fa47025636356def4976b42d40dac007c3dd17d

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2qPIC/:knw9oUUEEDlGUjc2HhG82qwm

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0570ab2449bcc2cb0df5ce775e8765a4_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections