Overview

overview

10

Static

static

10

0f860d8b08...18.exe

windows7-x64

10

0f860d8b08...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f860d8b08985cb5bf3b3c43a4f17f97_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0f860d8b08985cb5bf3b3c43a4f17f97

  • SHA1

    dd19bbf7e74a06c9f299183a332dd1536b250a8e

  • SHA256

    90a33a86578a9e7c206137f7901fee78d1868393d2ab7ba397b2ad43d94928f0

  • SHA512

    5bf1e3e0bcc25b0b29cc6a66cb39a0dafa6d1abc7b2971c378b8b95857d65923f69ab5793d38a351a45e3102c243d3e0817adba1f16af6245a2d1d4d66ce71f8

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfd:NAB2

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f860d8b08985cb5bf3b3c43a4f17f97_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections