Overview

overview

10

Static

static

10

63ef1f5c38...18.exe

windows7-x64

10

63ef1f5c38...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63ef1f5c38d4119c9befc9a3c737792f_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240521-tr58tsbe42

  • MD5

    63ef1f5c38d4119c9befc9a3c737792f

  • SHA1

    b46ca61be9d4c8027f343e86436a2bdf68a04543

  • SHA256

    fb9ffe1cf6539e27fed3957ab405232d28e7d78959cf1ae66f7910f181b96344

  • SHA512

    67fb1aa212a39d78bfbbfdb8a5d4d9bdd15fa12f24979eac9226b3291571d4ded086e6a12f085d636a739a9e4ee46dec643c2b49e007263972b1e0bb5364f621

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafMe:NABG

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      63ef1f5c38d4119c9befc9a3c737792f_JaffaCakes118

    • Size

      2.0MB

    • MD5

      63ef1f5c38d4119c9befc9a3c737792f

    • SHA1

      b46ca61be9d4c8027f343e86436a2bdf68a04543

    • SHA256

      fb9ffe1cf6539e27fed3957ab405232d28e7d78959cf1ae66f7910f181b96344

    • SHA512

      67fb1aa212a39d78bfbbfdb8a5d4d9bdd15fa12f24979eac9226b3291571d4ded086e6a12f085d636a739a9e4ee46dec643c2b49e007263972b1e0bb5364f621

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafMe:NABG

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks