General
-
Target
07848dce61e6088cc5182fdd66cce366_JaffaCakes118
-
Size
1.9MB
-
Sample
240429-m639fshe3w
-
MD5
07848dce61e6088cc5182fdd66cce366
-
SHA1
937636eb9ff293457f17fa44e3a9bafbf0507ecd
-
SHA256
8b194165132326b0a2b2628330366e0f0940d6f276a7ea6e21310f44c9fd31b9
-
SHA512
9f8a4e06543979a44ca797125e2a8f3f3f58de8766eb568efd5d7eb57e6b69e68a6110a374e4d7652c29a13ce738580077a359ff1e424bf0ffb3e5f9752a08a4
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlKv:NAB3
Behavioral task
behavioral1
Sample
07848dce61e6088cc5182fdd66cce366_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
07848dce61e6088cc5182fdd66cce366_JaffaCakes118
-
Size
1.9MB
-
MD5
07848dce61e6088cc5182fdd66cce366
-
SHA1
937636eb9ff293457f17fa44e3a9bafbf0507ecd
-
SHA256
8b194165132326b0a2b2628330366e0f0940d6f276a7ea6e21310f44c9fd31b9
-
SHA512
9f8a4e06543979a44ca797125e2a8f3f3f58de8766eb568efd5d7eb57e6b69e68a6110a374e4d7652c29a13ce738580077a359ff1e424bf0ffb3e5f9752a08a4
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlKv:NAB3
-
XMRig Miner payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Drops file in System32 directory
-