Overview

overview

10

Static

static

10

0e2ee601ff...18.exe

windows7-x64

10

0e2ee601ff...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e2ee601ff1f11d0ea9e998e515e6cca_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240502-l1d7psge95

  • MD5

    0e2ee601ff1f11d0ea9e998e515e6cca

  • SHA1

    2da5023f80ff82739cb4fd3cac21aa5fbebbcc3b

  • SHA256

    76cf8feaa24b91d79d0fec285a705167e9a63b5fbff17239a6e53b42bc3d3158

  • SHA512

    34339fe72f10efd9db6976cf00de253fd03da47472cb784d3ffe6705513960226343d44c9ea4cc2b3c7c9c26c5dc8a0780784d1ec30930ef8a35405bfb185391

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOE:NABJ

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      0e2ee601ff1f11d0ea9e998e515e6cca_JaffaCakes118

    • Size

      1.9MB

    • MD5

      0e2ee601ff1f11d0ea9e998e515e6cca

    • SHA1

      2da5023f80ff82739cb4fd3cac21aa5fbebbcc3b

    • SHA256

      76cf8feaa24b91d79d0fec285a705167e9a63b5fbff17239a6e53b42bc3d3158

    • SHA512

      34339fe72f10efd9db6976cf00de253fd03da47472cb784d3ffe6705513960226343d44c9ea4cc2b3c7c9c26c5dc8a0780784d1ec30930ef8a35405bfb185391

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOE:NABJ

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks