General

  • Target

    02f4fae01b12eb37197a3de8c023ca87_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240727-3yzjasyflc

  • MD5

    02f4fae01b12eb37197a3de8c023ca87

  • SHA1

    7106b67f44cdc7ff0179b2fd8cc3a0ae52454478

  • SHA256

    6fc4f5169c24e03fef270ca545f7a0648c278312bd5ef5a90034d832ec9b9d28

  • SHA512

    a76c1c5d8882447727411185fca5152643ac351c0f8011639137c20963dbd122a13b68fd47f40e1d22978ef9b43256a2666ab83f4446ba63a41e37d402a57dbe

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p1HzDgUf:NABf

Malware Config

Targets

    • Target

      02f4fae01b12eb37197a3de8c023ca87_JaffaCakes118

    • Size

      1.8MB

    • MD5

      02f4fae01b12eb37197a3de8c023ca87

    • SHA1

      7106b67f44cdc7ff0179b2fd8cc3a0ae52454478

    • SHA256

      6fc4f5169c24e03fef270ca545f7a0648c278312bd5ef5a90034d832ec9b9d28

    • SHA512

      a76c1c5d8882447727411185fca5152643ac351c0f8011639137c20963dbd122a13b68fd47f40e1d22978ef9b43256a2666ab83f4446ba63a41e37d402a57dbe

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p1HzDgUf:NABf

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks