General

  • Target

    076ce79112be69777b7427c49d13068c_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240429-mch2esgf4y

  • MD5

    076ce79112be69777b7427c49d13068c

  • SHA1

    c6548ec90dc1a1defc2141eb0b6ee12a16d309af

  • SHA256

    f53559a4ec4903c92be01e340a5f750dfdde55860a3c54c852d48f0454bae311

  • SHA512

    71f54e40df72e1009874303fb8c3ae6f339eebace2b010a17f0b020ba6441583853b76067c807160264f84770bbd7063ec6e0261da5c0d2f042915892d55c06f

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrI5V:NABn

Score
10/10

Malware Config

Targets

    • Target

      076ce79112be69777b7427c49d13068c_JaffaCakes118

    • Size

      1.8MB

    • MD5

      076ce79112be69777b7427c49d13068c

    • SHA1

      c6548ec90dc1a1defc2141eb0b6ee12a16d309af

    • SHA256

      f53559a4ec4903c92be01e340a5f750dfdde55860a3c54c852d48f0454bae311

    • SHA512

      71f54e40df72e1009874303fb8c3ae6f339eebace2b010a17f0b020ba6441583853b76067c807160264f84770bbd7063ec6e0261da5c0d2f042915892d55c06f

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrI5V:NABn

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks