General

  • Target

    34cef423d82b305b225485df8e398dff_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240511-qq5zwshg7w

  • MD5

    34cef423d82b305b225485df8e398dff

  • SHA1

    83d016889d49ceabb19c6ce9162896e7b8c5e5af

  • SHA256

    ce6a479d442a9a2dd7a2998de453ea106bd8d3abeda843579c6581190796fd0c

  • SHA512

    9eaefa289b6bd3582c9acce1481768f56e949b70d59e49068f5f81675af4af8b8f6d10534e2e0dce76c91b1ddbac9d5d8785f36b2552d42d6e2ed7dc2936c192

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPw2:Lz071uv4BPMkibTIA5CJr

Malware Config

Targets

    • Target

      34cef423d82b305b225485df8e398dff_JaffaCakes118

    • Size

      1.4MB

    • MD5

      34cef423d82b305b225485df8e398dff

    • SHA1

      83d016889d49ceabb19c6ce9162896e7b8c5e5af

    • SHA256

      ce6a479d442a9a2dd7a2998de453ea106bd8d3abeda843579c6581190796fd0c

    • SHA512

      9eaefa289b6bd3582c9acce1481768f56e949b70d59e49068f5f81675af4af8b8f6d10534e2e0dce76c91b1ddbac9d5d8785f36b2552d42d6e2ed7dc2936c192

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPw2:Lz071uv4BPMkibTIA5CJr

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks