Overview

overview

10

Static

static

10

0a61d6294f...18.exe

windows7-x64

10

0a61d6294f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a61d6294f8b06315097aa73799e4958_JaffaCakes118

  • Size

    2.4MB

  • MD5

    0a61d6294f8b06315097aa73799e4958

  • SHA1

    3e2826c191c246612f607792610f31019fd4e408

  • SHA256

    eecf2a4da4ef084160a5c170e1c4e61b793d6140f456dbea6244fdfa43b16e19

  • SHA512

    20bcc86cfd78286ff0c115f930efadf72e785e9af66c6c58aa787bf9a6743af084dcec0e63ad169dc39bd14401766bbbf5e3da646d40c6c8638a83a3167d767b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cbPBB:NABz

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a61d6294f8b06315097aa73799e4958_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections