Overview

overview

10

Static

static

10

166283028c...18.exe

windows7-x64

10

166283028c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    166283028cf89ef065f3d9cb5bd29de5_JaffaCakes118

  • Size

    1.6MB

  • MD5

    166283028cf89ef065f3d9cb5bd29de5

  • SHA1

    3369f7846c19de221da02a54b30f053fcecb272f

  • SHA256

    3d948da4f34e743ee21d886429c4f13e15d6fc0a147ef487ea00b19522129ebb

  • SHA512

    a884e3e2a8122911f15abc3dd78c9ca472be25240e4ed8cd51d3ba4f0e28283fc7d6f028ccf2487f41bd6ad09d1f5a043e9f9682833e8368ba2283bab9e9b16c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOyldYYz46ub4WyADRAEdkfIrh:knw9oUUEEDlGUh+hNMz5ukWt

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 166283028cf89ef065f3d9cb5bd29de5_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections