Overview

overview

10

Static

static

10

058982df4c...18.exe

windows7-x64

10

058982df4c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    058982df4ce7938d158f0c8d495744c2_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240428-s88vlsbb45

  • MD5

    058982df4ce7938d158f0c8d495744c2

  • SHA1

    c1d2659fe8972cee9e0586bf134d7802f6b3fcd0

  • SHA256

    49d8f1eb58fda6477ed1e6a3b4d8e4e6a9018b5798cafab1d3b4f5151d326a3d

  • SHA512

    e402e3ad6a0cac50da40db37d5e663ed50a0a56d79afdb59e0e30d9d6304f9f8097d053a19dd65ef7b08d971f99a13353644991df94814d2fd425e3a2fa51122

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwOM3P:Lz071uv4BPMkibTIA5CJ3Q

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      058982df4ce7938d158f0c8d495744c2_JaffaCakes118

    • Size

      1.4MB

    • MD5

      058982df4ce7938d158f0c8d495744c2

    • SHA1

      c1d2659fe8972cee9e0586bf134d7802f6b3fcd0

    • SHA256

      49d8f1eb58fda6477ed1e6a3b4d8e4e6a9018b5798cafab1d3b4f5151d326a3d

    • SHA512

      e402e3ad6a0cac50da40db37d5e663ed50a0a56d79afdb59e0e30d9d6304f9f8097d053a19dd65ef7b08d971f99a13353644991df94814d2fd425e3a2fa51122

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwOM3P:Lz071uv4BPMkibTIA5CJ3Q

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks