Overview

overview

10

Static

static

10

09405859a2...18.exe

windows7-x64

10

09405859a2...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    09405859a27a358fd8592b0bd09fd1a7_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240430-hc9f6aef27

  • MD5

    09405859a27a358fd8592b0bd09fd1a7

  • SHA1

    27add99a502d6e99f0f57ed542a633b9b7f092e4

  • SHA256

    49e64a34d90f9ccaf9fea992c17838048946690460a183958973949206fd47e4

  • SHA512

    74a2fb95bd504f803fb7377a8e9e8593b07a22f687d69adf06febb941b5e6103c3cb697be592b25447239e70a8cbe1228ad848e78a7cc62b9a0bd810db366526

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfq:NABt

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      09405859a27a358fd8592b0bd09fd1a7_JaffaCakes118

    • Size

      2.2MB

    • MD5

      09405859a27a358fd8592b0bd09fd1a7

    • SHA1

      27add99a502d6e99f0f57ed542a633b9b7f092e4

    • SHA256

      49e64a34d90f9ccaf9fea992c17838048946690460a183958973949206fd47e4

    • SHA512

      74a2fb95bd504f803fb7377a8e9e8593b07a22f687d69adf06febb941b5e6103c3cb697be592b25447239e70a8cbe1228ad848e78a7cc62b9a0bd810db366526

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfq:NABt

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks