General

  • Target

    03924de05733acda86b3b306ade74669_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240728-aq6cnazfkg

  • MD5

    03924de05733acda86b3b306ade74669

  • SHA1

    ca9a758c9d70a19039b0644f8cced50cf5c92086

  • SHA256

    1388d3a4f17b9a0755cc6285c87bd01b74528ca88f5f90ceda726cffb56deb0b

  • SHA512

    432da63c6dccde9d3e64b89fa97bee29b89fa491e061d17d4a1cd3b51972adcf506b60eb29c5e3c2be0f96a278c8927cda7c6e8a17cfccd9db092cb488674deb

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1:NABY

Malware Config

Targets

    • Target

      03924de05733acda86b3b306ade74669_JaffaCakes118

    • Size

      1.9MB

    • MD5

      03924de05733acda86b3b306ade74669

    • SHA1

      ca9a758c9d70a19039b0644f8cced50cf5c92086

    • SHA256

      1388d3a4f17b9a0755cc6285c87bd01b74528ca88f5f90ceda726cffb56deb0b

    • SHA512

      432da63c6dccde9d3e64b89fa97bee29b89fa491e061d17d4a1cd3b51972adcf506b60eb29c5e3c2be0f96a278c8927cda7c6e8a17cfccd9db092cb488674deb

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1:NABY

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks