General
-
Target
15423b12d0725c4a50ce7c9840638aa7_JaffaCakes118
-
Size
30KB
-
Sample
240627-jzaf1szfjc
-
MD5
15423b12d0725c4a50ce7c9840638aa7
-
SHA1
7ef618c233e6f58678de0657c104c39eb32de929
-
SHA256
fee0bbef61396a9f82c6f49a21484727e1533ea2d821c5d15e5a739bfb6066de
-
SHA512
2e82e865ee4fafacaf25a76a3fbecf99e53b5f76c4c41fe56f79c8b4685919f12ba4b27125f9487d096fe4a9949ffd5901fac3005ffdc485c97f120f0649fec5
-
SSDEEP
384:p7pQBDf6jlpTWg3vMGQiirhHwMyGj4CC9vEKMvU/4Qdre21jT58vKpG2Y0orcfKG:p78zQ5VFNcDAFLcIwgnoYq0xFBVdHtln
Malware Config
Targets
-
-
Target
15423b12d0725c4a50ce7c9840638aa7_JaffaCakes118
-
Size
30KB
-
MD5
15423b12d0725c4a50ce7c9840638aa7
-
SHA1
7ef618c233e6f58678de0657c104c39eb32de929
-
SHA256
fee0bbef61396a9f82c6f49a21484727e1533ea2d821c5d15e5a739bfb6066de
-
SHA512
2e82e865ee4fafacaf25a76a3fbecf99e53b5f76c4c41fe56f79c8b4685919f12ba4b27125f9487d096fe4a9949ffd5901fac3005ffdc485c97f120f0649fec5
-
SSDEEP
384:p7pQBDf6jlpTWg3vMGQiirhHwMyGj4CC9vEKMvU/4Qdre21jT58vKpG2Y0orcfKG:p78zQ5VFNcDAFLcIwgnoYq0xFBVdHtln
Score10/10-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
Deletes system logs
Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.
-
Flushes firewall rules
Flushes/ disables firewall rules inside the Linux kernel.
-
Loads a kernel module
Loads a Linux kernel module, potentially to achieve persistence
-
Attempts to change immutable files
Modifies inode attributes on the filesystem to allow changing of immutable files.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Disables AppArmor
Disables AppArmor security module.
-
Disables SELinux
Disables SELinux security module.
-
Enumerates running processes
Discovers information about currently running processes on the system
-