Extracted

• • Target

    0a5779a97fbee3eabd43dd8168b5cb57_JaffaCakes118

  • Size

    6.3MB

  • MD5

    0a5779a97fbee3eabd43dd8168b5cb57

  • SHA1

    e0cbec47e756c7d636ae143b53ba97d072107d4b

  • SHA256

    fdbdc47b60e826a5f123d2fa836c3acfa942d18404964f80fb3c10ae13928262

  • SHA512

    43957d9c2a9901156e2ce29347677c22c692f4e8ba496f90ffe822d11d93c3987188a11c2d21a3a452bf2613f5f5001819aedeef914738809ff5fee1926d5260

  • SSDEEP

    98304:eDmfjaelIX2iBGx3AbrcoVPnQCrRT9AR6bFGMIzm:OgVlITQFcrLPnQY+R6bgMT

  Score

  10^/10

  xmrigminerupx

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig

  • XMRig Miner payload

    miner

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Legitimate hosting services abused for malware hosting/C2

  • Drops autorun.inf file

    Malware can abuse Windows Autorun to spread further via attached volumes.

  behavioral1behavioral2