Overview

overview

10

Static

static

10

0b4ea98f70...18.exe

windows7-x64

10

0b4ea98f70...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b4ea98f7054221f799c77f1b2a8a2e7_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240501-hk8vlaac7z

  • MD5

    0b4ea98f7054221f799c77f1b2a8a2e7

  • SHA1

    1aeb98e9872f3e9bd1f90615fd0ab66168d9a4c5

  • SHA256

    e5e0cbd87fcc0ca5a0054452cd94a4359f121fc650be9e07d76452b8473376bb

  • SHA512

    da1249a0808fef1d3c1fccfd28a8eb173feba8b693d7624c7adf654215be766b5ef1de707ede999a14f6393f9b21d7084a4c2b49fa421b850de3ebc3bc09ada2

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1km:NABi

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      0b4ea98f7054221f799c77f1b2a8a2e7_JaffaCakes118

    • Size

      1.9MB

    • MD5

      0b4ea98f7054221f799c77f1b2a8a2e7

    • SHA1

      1aeb98e9872f3e9bd1f90615fd0ab66168d9a4c5

    • SHA256

      e5e0cbd87fcc0ca5a0054452cd94a4359f121fc650be9e07d76452b8473376bb

    • SHA512

      da1249a0808fef1d3c1fccfd28a8eb173feba8b693d7624c7adf654215be766b5ef1de707ede999a14f6393f9b21d7084a4c2b49fa421b850de3ebc3bc09ada2

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1km:NABi

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks