General

  • Target

    13c27f5f66aee7b124aeab04a161c036_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240504-v36jeaff55

  • MD5

    13c27f5f66aee7b124aeab04a161c036

  • SHA1

    10846bea4ef3640ece65c4e631b8634760cd329c

  • SHA256

    896ab68d21c0295d113c2627f287ce2e92e3d930e29117a0cfc6dee7953c255d

  • SHA512

    39a313d3fe8e56b2557ea1b61337de3d17e346e796c0e8edd4686ec3971243d231af31c9c3b67b20e5f5592dc32f6ce2715c6541d128c41872239a7918dfe976

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwU:Lz071uv4BPMkibTIA5CJZ

Malware Config

Targets

    • Target

      13c27f5f66aee7b124aeab04a161c036_JaffaCakes118

    • Size

      1.4MB

    • MD5

      13c27f5f66aee7b124aeab04a161c036

    • SHA1

      10846bea4ef3640ece65c4e631b8634760cd329c

    • SHA256

      896ab68d21c0295d113c2627f287ce2e92e3d930e29117a0cfc6dee7953c255d

    • SHA512

      39a313d3fe8e56b2557ea1b61337de3d17e346e796c0e8edd4686ec3971243d231af31c9c3b67b20e5f5592dc32f6ce2715c6541d128c41872239a7918dfe976

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwU:Lz071uv4BPMkibTIA5CJZ

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks