Overview

overview

10

Static

static

10

0a21dadeae...18.exe

windows7-x64

10

0a21dadeae...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a21dadeae67e1dafdd8183124170555_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240430-tgyq1aae8v

  • MD5

    0a21dadeae67e1dafdd8183124170555

  • SHA1

    e1600ac9ab1edeeb9a176362012342fbee14c5e7

  • SHA256

    3e5e95367aa10869ca254f585028469f2cda75c5014332227703b619c1b8281c

  • SHA512

    679fba941e6e48d69f98027ddab2366181f21124eec97d28885fbbc019a731b297abaec29c6b7c7a0d749477ec5fede5b1d4b3eeaf3574209ff74ba02c7030b6

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKVZ:NABY

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      0a21dadeae67e1dafdd8183124170555_JaffaCakes118

    • Size

      1.7MB

    • MD5

      0a21dadeae67e1dafdd8183124170555

    • SHA1

      e1600ac9ab1edeeb9a176362012342fbee14c5e7

    • SHA256

      3e5e95367aa10869ca254f585028469f2cda75c5014332227703b619c1b8281c

    • SHA512

      679fba941e6e48d69f98027ddab2366181f21124eec97d28885fbbc019a731b297abaec29c6b7c7a0d749477ec5fede5b1d4b3eeaf3574209ff74ba02c7030b6

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKVZ:NABY

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks