General

  • Target

    08e74011ca93959bed52c2e491273756_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240430-dt4j1sba28

  • MD5

    08e74011ca93959bed52c2e491273756

  • SHA1

    9c4646daa7cc2d394930ecaeb4d2edd38c699531

  • SHA256

    7e62093984c9bee719dd565a9ef7290a67bbede9f6642cc6c045df6431f8a332

  • SHA512

    a53dc6279615d03835ba416468a4631b27601849da787cad3bdc6aebef25c01e1851773229e56dce572239d599e30ceda71117db148edd635ab8316954800c4f

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOy:NAB/

Score
10/10

Malware Config

Targets

    • Target

      08e74011ca93959bed52c2e491273756_JaffaCakes118

    • Size

      1.9MB

    • MD5

      08e74011ca93959bed52c2e491273756

    • SHA1

      9c4646daa7cc2d394930ecaeb4d2edd38c699531

    • SHA256

      7e62093984c9bee719dd565a9ef7290a67bbede9f6642cc6c045df6431f8a332

    • SHA512

      a53dc6279615d03835ba416468a4631b27601849da787cad3bdc6aebef25c01e1851773229e56dce572239d599e30ceda71117db148edd635ab8316954800c4f

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOy:NAB/

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks