Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 17:15

General

  • Target

    2127ea6548c74c2709d630a25c940ad2_JaffaCakes118.exe

  • Size

    814KB

  • MD5

    2127ea6548c74c2709d630a25c940ad2

  • SHA1

    2de8baea03d4a08168689b61d753b03ddfb90b28

  • SHA256

    d9e35350ef22be83db3d4cf671b380596a042d2f5014ad0c83bea5b8e55cbaab

  • SHA512

    93f0eea8286673e9ea02978f3bdca8f550778b4f67c23284a9c138496336ca5238fe438fa1f3e999a55e46e0cda3697741efb6acdf6fb4856d7cac7ebce2a5ef

  • SSDEEP

    24576:Ck6Igpf8RTYP5W/1w4w9Bs0LPcivhANItHRLc:YIgp6TYP5w1wF9BLLESTrLc

Score
10/10

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2127ea6548c74c2709d630a25c940ad2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2127ea6548c74c2709d630a25c940ad2_JaffaCakes118.exe"
    1⤵
      PID:3012

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3012-0-0x000000013FC40000-0x000000013FE0C000-memory.dmp

      Filesize

      1.8MB

    • memory/3012-2-0x000000013FC40000-0x000000013FE0C000-memory.dmp

      Filesize

      1.8MB