Overview

overview

10

Static

static

10

02dde36451...18.exe

windows7-x64

10

02dde36451...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    02dde36451f709e02658e947d7786db1_JaffaCakes118

  • Size

    2.8MB

  • Sample

    240727-3ww1dsyelh

  • MD5

    02dde36451f709e02658e947d7786db1

  • SHA1

    cdfda1360689fe1543dce00f6266dd219f9c96e6

  • SHA256

    ff0db28d7fbe4004e4272243079e191dd273f90029fda634c7e152f0474cadfb

  • SHA512

    00985502dc4a5ebfc230c3bcbd9d871d217a31bbd34f7822ce6f7c23e4410a6d08f20f86b5536fc1a771c4b46e192b912eb60b9e73e06b38f5586e4b54bfe242

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5I/P02:NABw

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      02dde36451f709e02658e947d7786db1_JaffaCakes118

    • Size

      2.8MB

    • MD5

      02dde36451f709e02658e947d7786db1

    • SHA1

      cdfda1360689fe1543dce00f6266dd219f9c96e6

    • SHA256

      ff0db28d7fbe4004e4272243079e191dd273f90029fda634c7e152f0474cadfb

    • SHA512

      00985502dc4a5ebfc230c3bcbd9d871d217a31bbd34f7822ce6f7c23e4410a6d08f20f86b5536fc1a771c4b46e192b912eb60b9e73e06b38f5586e4b54bfe242

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5I/P02:NABw

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks