General

  • Target

    05d1b4a137a2c5b590576a4632506abd_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240428-w5y3saec4v

  • MD5

    05d1b4a137a2c5b590576a4632506abd

  • SHA1

    179e2056dfdc86125fd016af68bcffadde1306fe

  • SHA256

    2c2912b8abd2b5aa2bbe0992381e3a81177bd29c36bd7a44b7769a67f1e79a72

  • SHA512

    1903a60ee9ea16ae75e13989193323d6d93e36c406919eca26b1eee256e3e3c2ee3cc98aa71adf9db72cf9ddba0129fe02f7ddb3ced6e43b288b96e901ccb283

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U0:NABV

Score
10/10

Malware Config

Targets

    • Target

      05d1b4a137a2c5b590576a4632506abd_JaffaCakes118

    • Size

      1.9MB

    • MD5

      05d1b4a137a2c5b590576a4632506abd

    • SHA1

      179e2056dfdc86125fd016af68bcffadde1306fe

    • SHA256

      2c2912b8abd2b5aa2bbe0992381e3a81177bd29c36bd7a44b7769a67f1e79a72

    • SHA512

      1903a60ee9ea16ae75e13989193323d6d93e36c406919eca26b1eee256e3e3c2ee3cc98aa71adf9db72cf9ddba0129fe02f7ddb3ced6e43b288b96e901ccb283

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U0:NABV

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks