General

  • Target

    03b1c24229d33c26654e1313bb1e7bba_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240728-avck5szgnf

  • MD5

    03b1c24229d33c26654e1313bb1e7bba

  • SHA1

    a5801316fb1fcad04a5a8a8401bf7a9f69bb0d8c

  • SHA256

    c9feb36ae2c14b6a4d5c06b3f9556698218392726850bf1898931b5b4a3661d0

  • SHA512

    a43a5cd5bfaf5d044ea975b56115b856fdee9c37a459c5b34e9090983535fe43a03c677626e14f201e7cb1a7be96e985d9ab6313491a84ee8b1cab7d7ac4ca11

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXeug:NABY

Malware Config

Targets

    • Target

      03b1c24229d33c26654e1313bb1e7bba_JaffaCakes118

    • Size

      1.7MB

    • MD5

      03b1c24229d33c26654e1313bb1e7bba

    • SHA1

      a5801316fb1fcad04a5a8a8401bf7a9f69bb0d8c

    • SHA256

      c9feb36ae2c14b6a4d5c06b3f9556698218392726850bf1898931b5b4a3661d0

    • SHA512

      a43a5cd5bfaf5d044ea975b56115b856fdee9c37a459c5b34e9090983535fe43a03c677626e14f201e7cb1a7be96e985d9ab6313491a84ee8b1cab7d7ac4ca11

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXeug:NABY

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks