xmrig | b8685b9188e596aef8bcde8edf8e73cbb15c8d2f5c46d14b3c90dc9e5f9ccd76 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

0914ee9102...18.exe

windows7-x64

0914ee9102...18.exe

windows10-2004-x64

Sharing

General

Target

0914ee9102023925991c53a9f0fe8a28_JaffaCakes118
Size

1.9MB
Sample

240430-fp1zfade7y
MD5

0914ee9102023925991c53a9f0fe8a28
SHA1

659a574e9975a7a82d19146906935bee2a444f5c
SHA256

b8685b9188e596aef8bcde8edf8e73cbb15c8d2f5c46d14b3c90dc9e5f9ccd76
SHA512

5d7ac0cb75441c945088d5ed497bde467355c8e23cdbd71a5f59ce0fb8a751afcb2b788e20d411685cb7539f97525c893c501a9c523e3e71bb56e2f63c3def62
SSDEEP

49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U13:NABc

Score

10^/10

xmrig miner upx

Static task

static1

upx miner xmrig

4 signatures

Behavioral task

behavioral1

Sample

0914ee9102023925991c53a9f0fe8a28_JaffaCakes118.exe

Resource

win7-20240221-en

xmrig miner upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

0914ee9102023925991c53a9f0fe8a28_JaffaCakes118.exe

Resource

win10v2004-20240419-en

xmrig miner upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  0914ee9102023925991c53a9f0fe8a28_JaffaCakes118
- Size
  
  1.9MB
- MD5
  
  0914ee9102023925991c53a9f0fe8a28
- SHA1
  
  659a574e9975a7a82d19146906935bee2a444f5c
- SHA256
  
  b8685b9188e596aef8bcde8edf8e73cbb15c8d2f5c46d14b3c90dc9e5f9ccd76
- SHA512
  
  5d7ac0cb75441c945088d5ed497bde467355c8e23cdbd71a5f59ce0fb8a751afcb2b788e20d411685cb7539f97525c893c501a9c523e3e71bb56e2f63c3def62
- SSDEEP
  
  49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U13:NABc
Score

10^/10

xmrig miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Blocklisted process makes network request
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.