General

  • Target

    167e538991066133fd94f85139cc5682_JaffaCakes118

  • Size

    906KB

  • Sample

    240505-hpvtjaad6y

  • MD5

    167e538991066133fd94f85139cc5682

  • SHA1

    3980cb812630f36c9dbae97d21548a15b1f7eefc

  • SHA256

    133c5ea0d71028bdaf09b68ccdd214e4baf212508a2c7ff9cd2f7a3e2d170576

  • SHA512

    d025a9b7e83af954000722bdefe3c50249c7d43966597a8e92021657a5bbc974e421d3496d37c8e82213334f758e18aac0549dcc98ef8ac1295695d313c662ed

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8b/5I:knw9oUUEEDlOuJUu

Score
10/10

Malware Config

Targets

    • Target

      167e538991066133fd94f85139cc5682_JaffaCakes118

    • Size

      906KB

    • MD5

      167e538991066133fd94f85139cc5682

    • SHA1

      3980cb812630f36c9dbae97d21548a15b1f7eefc

    • SHA256

      133c5ea0d71028bdaf09b68ccdd214e4baf212508a2c7ff9cd2f7a3e2d170576

    • SHA512

      d025a9b7e83af954000722bdefe3c50249c7d43966597a8e92021657a5bbc974e421d3496d37c8e82213334f758e18aac0549dcc98ef8ac1295695d313c662ed

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8b/5I:knw9oUUEEDlOuJUu

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks