General
-
Target
32a30f66357df628722b04a97de6a145_JaffaCakes118
-
Size
30KB
-
Sample
240710-az5gqaxelh
-
MD5
32a30f66357df628722b04a97de6a145
-
SHA1
381e82ee576e535463f4917dcf4d0ddb1bce5be2
-
SHA256
5db035748dfe4e98c21333ffe337e15cd4d8ae517fe69d18932a34951e27c8ac
-
SHA512
2eba41598a178936eb2ada59bdda10e532d55e157fb573d1f011d0ae0c2c9247c71b1bf86990f32a50e38fa19426283cb11a314568475a1b41db4a34d677772e
-
SSDEEP
384:p7pQBDf6jlpTWg3vMGQiirhHwMyGj4CC9vEKMvU/4Qdre21jT58vKpG2Y0orcfKU:p78zQ5VFNcDAFLcIwgnoYq0xFBVdHt7n
Malware Config
Targets
-
-
Target
32a30f66357df628722b04a97de6a145_JaffaCakes118
-
Size
30KB
-
MD5
32a30f66357df628722b04a97de6a145
-
SHA1
381e82ee576e535463f4917dcf4d0ddb1bce5be2
-
SHA256
5db035748dfe4e98c21333ffe337e15cd4d8ae517fe69d18932a34951e27c8ac
-
SHA512
2eba41598a178936eb2ada59bdda10e532d55e157fb573d1f011d0ae0c2c9247c71b1bf86990f32a50e38fa19426283cb11a314568475a1b41db4a34d677772e
-
SSDEEP
384:p7pQBDf6jlpTWg3vMGQiirhHwMyGj4CC9vEKMvU/4Qdre21jT58vKpG2Y0orcfKU:p78zQ5VFNcDAFLcIwgnoYq0xFBVdHt7n
Score10/10-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
Deletes system logs
Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.
-
Flushes firewall rules
Flushes/ disables firewall rules inside the Linux kernel.
-
Loads a kernel module
Loads a Linux kernel module, potentially to achieve persistence
-
Attempts to change immutable files
Modifies inode attributes on the filesystem to allow changing of immutable files.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Disables AppArmor
Disables AppArmor security module.
-
Disables SELinux
Disables SELinux security module.
-
Enumerates running processes
Discovers information about currently running processes on the system
-