Overview

overview

10

Static

static

10

0520e49e0c...18.exe

windows7-x64

10

0520e49e0c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0520e49e0c41f56b68072bca30bba771_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240728-b32qnstgjb

  • MD5

    0520e49e0c41f56b68072bca30bba771

  • SHA1

    88fb1a99fd4dd4b6789fc0c903b21db227cc2d62

  • SHA256

    28a4c4886ed3f76dfead14ae805db5f8df1438fe1832f2ba4820db55a44a3bee

  • SHA512

    5e8050b49df39a8e76230982c24c8837a83318579784e4913eb562e6ef40511f87d9ff90d77939cebddeaf5036418ac5c9e60a68f5e3aeacbbf4a51c08a69421

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtU:Lz071uv4BPMkibTIA5I4TNrpDGK/T

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      0520e49e0c41f56b68072bca30bba771_JaffaCakes118

    • Size

      1.7MB

    • MD5

      0520e49e0c41f56b68072bca30bba771

    • SHA1

      88fb1a99fd4dd4b6789fc0c903b21db227cc2d62

    • SHA256

      28a4c4886ed3f76dfead14ae805db5f8df1438fe1832f2ba4820db55a44a3bee

    • SHA512

      5e8050b49df39a8e76230982c24c8837a83318579784e4913eb562e6ef40511f87d9ff90d77939cebddeaf5036418ac5c9e60a68f5e3aeacbbf4a51c08a69421

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtU:Lz071uv4BPMkibTIA5I4TNrpDGK/T

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks