Overview

overview

10

Static

static

10

0a50738b72...18.exe

windows7-x64

10

0a50738b72...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a50738b724d65a9dda77cc5da125e07_JaffaCakes118

  • Size

    1.7MB

  • MD5

    0a50738b724d65a9dda77cc5da125e07

  • SHA1

    e6434ab25e0281978aaa68b72c6d612f9cf09bda

  • SHA256

    2a4cd0317345196267bda5a14c50d5b0121f02af948c9d4141c2852d2fd1e91f

  • SHA512

    56a0109db81f82d41b05d92d68bb93ea89aa163f4094048732e4b1dbf1becc66115b3fe9e9920fde3a61abf0c26e4f6260a15a4a7f889048b15290854e9ed155

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMK7:NABm

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a50738b724d65a9dda77cc5da125e07_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections