Overview

overview

10

Static

static

10

0848c4e89f...18.exe

windows7-x64

10

0848c4e89f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0848c4e89f59e553905696971546e442_JaffaCakes118

  • Size

    2.8MB

  • Sample

    240429-wmax8sgg75

  • MD5

    0848c4e89f59e553905696971546e442

  • SHA1

    23c5ad56d36935ad4841604194c8bb3302d0d169

  • SHA256

    4a00e77398730b82e208f406125cdb207a75238eda6ed0402a2ac5d2f4ef0bd5

  • SHA512

    3e1cc6f7715cf1c51b0beee211e5b5cbbf0caf64084dfb88d9e6344b64213d79554dbc3ed0cd9dd879adc15eea8e900a36fe639c9c8d5ff90eabe559384d50f5

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5O1xR9:NABG

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      0848c4e89f59e553905696971546e442_JaffaCakes118

    • Size

      2.8MB

    • MD5

      0848c4e89f59e553905696971546e442

    • SHA1

      23c5ad56d36935ad4841604194c8bb3302d0d169

    • SHA256

      4a00e77398730b82e208f406125cdb207a75238eda6ed0402a2ac5d2f4ef0bd5

    • SHA512

      3e1cc6f7715cf1c51b0beee211e5b5cbbf0caf64084dfb88d9e6344b64213d79554dbc3ed0cd9dd879adc15eea8e900a36fe639c9c8d5ff90eabe559384d50f5

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5O1xR9:NABG

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks