Overview

overview

10

Static

static

10

09b7493b12...18.exe

windows7-x64

10

09b7493b12...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09b7493b12b8fb17a374aed02a80f692_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240430-nx6tnabe8x

  • MD5

    09b7493b12b8fb17a374aed02a80f692

  • SHA1

    25c5ee7f02417eae4be69f5826a2dae3bf2dc398

  • SHA256

    aa28693edd9ee60d07ff598f0145f4c3be9521e11576755d546032b5322bacfb

  • SHA512

    554ae5b473a602d68f731e221b9763c32a83982c3b7ea93ccefa8564f72908f83506a8fd82c608bfdd8add285ad97bc6d402ae2218e7b8056487dda49f7fac99

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwk:Lz071uv4BPMkibTIA5CJT

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      09b7493b12b8fb17a374aed02a80f692_JaffaCakes118

    • Size

      1.4MB

    • MD5

      09b7493b12b8fb17a374aed02a80f692

    • SHA1

      25c5ee7f02417eae4be69f5826a2dae3bf2dc398

    • SHA256

      aa28693edd9ee60d07ff598f0145f4c3be9521e11576755d546032b5322bacfb

    • SHA512

      554ae5b473a602d68f731e221b9763c32a83982c3b7ea93ccefa8564f72908f83506a8fd82c608bfdd8add285ad97bc6d402ae2218e7b8056487dda49f7fac99

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwk:Lz071uv4BPMkibTIA5CJT

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks