General

  • Target

    6827422d1c3790b8ae0a5c27d3689beb_JaffaCakes118

  • Size

    910KB

  • Sample

    240522-wsmh8abd6x

  • MD5

    6827422d1c3790b8ae0a5c27d3689beb

  • SHA1

    5b64db54902a02cb5269bbdaa959fcd50c1f37a7

  • SHA256

    58dba7acff401599f1503ae6741f3be82f8491975334eb22d54c46f4c404863e

  • SHA512

    68f00e290c76e7de9bfca30702f933262d1b33f98cdb91c7e3c0b6f36bf8e772b2aebbc2312e3a3e72639307df6381777bb857d7f61325ae65fe136be1445dc5

  • SSDEEP

    24576:BBlDbOOwQSfa40tJnM7ZuyCzVkM7ljRL6e9dSyK:BB1qOwQSfM3nOizVkOHWe9dSy

Malware Config

Targets

    • Target

      6827422d1c3790b8ae0a5c27d3689beb_JaffaCakes118

    • Size

      910KB

    • MD5

      6827422d1c3790b8ae0a5c27d3689beb

    • SHA1

      5b64db54902a02cb5269bbdaa959fcd50c1f37a7

    • SHA256

      58dba7acff401599f1503ae6741f3be82f8491975334eb22d54c46f4c404863e

    • SHA512

      68f00e290c76e7de9bfca30702f933262d1b33f98cdb91c7e3c0b6f36bf8e772b2aebbc2312e3a3e72639307df6381777bb857d7f61325ae65fe136be1445dc5

    • SSDEEP

      24576:BBlDbOOwQSfa40tJnM7ZuyCzVkM7ljRL6e9dSyK:BB1qOwQSfM3nOizVkOHWe9dSy

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks