Analysis

  • max time kernel
    92s
  • max time network
    93s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-05-2024 05:15

General

  • Target

    6d7129dd5d04eeb2bf161eb054273b34_JaffaCakes118.exe

  • Size

    5.9MB

  • MD5

    6d7129dd5d04eeb2bf161eb054273b34

  • SHA1

    fc9f96c5dc9f00c15340da8c8b2eae7d298fbc50

  • SHA256

    4ecb5d0ca7be12d9bafdafd7819f6005b23bcf57860eee5477cb2cbac31ed2d1

  • SHA512

    99fc38762708736aeaeceb810c4dc10702dcad025b7b62558e7fe4f2a9533783bf32c181358e35578f2a46435bff09bc21b4a680f1000476cb63427cdd9c4a1b

  • SSDEEP

    98304:demTLkNdfE0pZ3u56utgpPFotBER/mQ32lUl:E+b56utgpPF8u/7l

Score
10/10

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6d7129dd5d04eeb2bf161eb054273b34_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6d7129dd5d04eeb2bf161eb054273b34_JaffaCakes118.exe"
    1⤵
      PID:3512

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3512-0-0x00007FF6591B0000-0x00007FF659504000-memory.dmp
      Filesize

      3.3MB