Overview

overview

10

Static

static

10

02385b9b04...18.exe

windows7-x64

10

02385b9b04...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02385b9b04631a3875888127e863558f_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240727-28wdysxcjh

  • MD5

    02385b9b04631a3875888127e863558f

  • SHA1

    63896377f85f5919f21bd24cdbffea55d6cb0b1b

  • SHA256

    64e907711914cdb44f3f734e41d385f2b1f7d96bf9f59de8cf105b6d48fc45ab

  • SHA512

    77ff02c31646c41454de296adb9589e085a6ec9403868a1852884a7986d3bed94f04fa1e61400a955b97778c12d6954fda34aa2ee76c4b59e256e5a491dd59f5

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafMvwWBe:NABe

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      02385b9b04631a3875888127e863558f_JaffaCakes118

    • Size

      2.2MB

    • MD5

      02385b9b04631a3875888127e863558f

    • SHA1

      63896377f85f5919f21bd24cdbffea55d6cb0b1b

    • SHA256

      64e907711914cdb44f3f734e41d385f2b1f7d96bf9f59de8cf105b6d48fc45ab

    • SHA512

      77ff02c31646c41454de296adb9589e085a6ec9403868a1852884a7986d3bed94f04fa1e61400a955b97778c12d6954fda34aa2ee76c4b59e256e5a491dd59f5

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafMvwWBe:NABe

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks