General
-
Target
52940d065af4faae2c6f6a289040bb72_JaffaCakes118
-
Size
30KB
-
Sample
240717-me6v9swgkk
-
MD5
52940d065af4faae2c6f6a289040bb72
-
SHA1
005bafac97f4734cfc8c5d4f14e231df11f4d73a
-
SHA256
76021dd25cb21b31b81a43428ebd18640d0598c8afeefc502c7a2ab660de8df5
-
SHA512
ad31d4768c1bd18fe34548cc76a617abe480bbdc244abaa09049654d177984102496842a98ca94903a4db89a708519ddab7d1fc39e08e4979c33737be976de2d
-
SSDEEP
384:p7pQBDf6jlpTWg3vMGQiirhHwMyGj4CC9vEKMvU/4Qdre21jT58vKpG2Y0orcfKU:p78zQ5VFNcDAFLcIwgnoYq0xFBVdHtDn
Malware Config
Targets
-
-
Target
52940d065af4faae2c6f6a289040bb72_JaffaCakes118
-
Size
30KB
-
MD5
52940d065af4faae2c6f6a289040bb72
-
SHA1
005bafac97f4734cfc8c5d4f14e231df11f4d73a
-
SHA256
76021dd25cb21b31b81a43428ebd18640d0598c8afeefc502c7a2ab660de8df5
-
SHA512
ad31d4768c1bd18fe34548cc76a617abe480bbdc244abaa09049654d177984102496842a98ca94903a4db89a708519ddab7d1fc39e08e4979c33737be976de2d
-
SSDEEP
384:p7pQBDf6jlpTWg3vMGQiirhHwMyGj4CC9vEKMvU/4Qdre21jT58vKpG2Y0orcfKU:p78zQ5VFNcDAFLcIwgnoYq0xFBVdHtDn
Score10/10-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
Deletes system logs
Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.
-
Flushes firewall rules
Flushes/ disables firewall rules inside the Linux kernel.
-
Loads a kernel module
Loads a Linux kernel module, potentially to achieve persistence
-
Attempts to change immutable files
Modifies inode attributes on the filesystem to allow changing of immutable files.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Disables AppArmor
Disables AppArmor security module.
-
Disables SELinux
Disables SELinux security module.
-
Enumerates running processes
Discovers information about currently running processes on the system
-