General

  • Target

    79cb166363ffa4028273476be0e9b04e_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240527-vam7csbf68

  • MD5

    79cb166363ffa4028273476be0e9b04e

  • SHA1

    5c71dc1f4dc036ead2678cd6f3c0af01b75b4dc1

  • SHA256

    028ed996f040010cda143d318d62165037f56edff079f26bd2eae7dd7a472f82

  • SHA512

    20c4aef9e228d91bb5d247e3fb2b50b1f560ee6f2c7e08958b1f5d6afe6040089f78469b1afa51a27f1f6f8cd4fef163756a0e145983ad0125b374f02e3264f2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcjQe:knw9oUUEEDlGUJ8Y9c7

Score
10/10

Malware Config

Targets

    • Target

      79cb166363ffa4028273476be0e9b04e_JaffaCakes118

    • Size

      1.1MB

    • MD5

      79cb166363ffa4028273476be0e9b04e

    • SHA1

      5c71dc1f4dc036ead2678cd6f3c0af01b75b4dc1

    • SHA256

      028ed996f040010cda143d318d62165037f56edff079f26bd2eae7dd7a472f82

    • SHA512

      20c4aef9e228d91bb5d247e3fb2b50b1f560ee6f2c7e08958b1f5d6afe6040089f78469b1afa51a27f1f6f8cd4fef163756a0e145983ad0125b374f02e3264f2

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcjQe:knw9oUUEEDlGUJ8Y9c7

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks