Overview

overview

10

Static

static

10

0870d4f874...18.exe

windows7-x64

10

0870d4f874...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0870d4f874362dd8b6e18d583ff3adb3_JaffaCakes118

  • Size

    964KB

  • MD5

    0870d4f874362dd8b6e18d583ff3adb3

  • SHA1

    cae2d9eebbdd6b6503e6379ca40d441ca24408f7

  • SHA256

    79584aebd3b07627c4285971d29ac8434e63ce1f22936819301e0943e28e84c2

  • SHA512

    6f54b91a55461d34999fb191d96e45f0484e920e644e6ec0c046e6ec20d56d777ebf2e0575542eeef4ebfcba70f0a3a3b46bfc69d7f370b7bb5b5d804335f9c2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0RD/J54y9K6x:knw9oUUEEDlOuJnRRz

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0870d4f874362dd8b6e18d583ff3adb3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections