Overview

overview

10

Static

static

10

17e586afd2...18.exe

windows7-x64

10

17e586afd2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    17e586afd2375bcb595009e9d9865d43_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240505-qrv63sbc7z

  • MD5

    17e586afd2375bcb595009e9d9865d43

  • SHA1

    29560ac5b7d9a172216c9ef31ac8e8d2772f63d3

  • SHA256

    0e15cc165d75a0ca71041a094bf10c0546981a5057910ed9a970a9b742533c26

  • SHA512

    5ca802a8351f622794519db4d1cbcfd78d2f36c42118cf6d0c743bdc8dc12f8419b2ecf13f582227011731f916ab144241e329bf23d08e08b0e3ce64b740493b

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwj62:Lz071uv4BPMkibTIA5CJw

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      17e586afd2375bcb595009e9d9865d43_JaffaCakes118

    • Size

      1.4MB

    • MD5

      17e586afd2375bcb595009e9d9865d43

    • SHA1

      29560ac5b7d9a172216c9ef31ac8e8d2772f63d3

    • SHA256

      0e15cc165d75a0ca71041a094bf10c0546981a5057910ed9a970a9b742533c26

    • SHA512

      5ca802a8351f622794519db4d1cbcfd78d2f36c42118cf6d0c743bdc8dc12f8419b2ecf13f582227011731f916ab144241e329bf23d08e08b0e3ce64b740493b

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwj62:Lz071uv4BPMkibTIA5CJw

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks