Overview

overview

10

Static

static

10

8c0c485bf3...18.exe

windows7-x64

10

8c0c485bf3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c0c485bf3d4d30551042005160478c3_JaffaCakes118

  • Size

    1.8MB

  • MD5

    8c0c485bf3d4d30551042005160478c3

  • SHA1

    91849114f3c2af768dcfd5f4ab9c0456fd5c19a1

  • SHA256

    6af1f579e9af29db46af62ec8c9d93a893ef40864fdb0bc3a0119e31c7cd9466

  • SHA512

    9cc7aeaddcf06ca0ba0be2b1296d1cbb69c27e0b68b16d08b9c9e231001cc2cc20bf96236f54c54958df328751e230315b9dd8ef40afb6c92a2127f5d4435be1

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zY:Lz071uv4BPMkibTIA5lCx7kvRWa4puWj

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c0c485bf3d4d30551042005160478c3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections