General

  • Target

    827825c27266ccb0c8dd6ada96ce43c2_JaffaCakes118

  • Size

    784KB

  • Sample

    240802-bk6lxa1fqe

  • MD5

    827825c27266ccb0c8dd6ada96ce43c2

  • SHA1

    181584429278a7461f1d021e0fa5001a3b98da5e

  • SHA256

    a25f0b70a84b7df9e1d813ed06298cfeb17c8dc6445dbf24547d569d231322ae

  • SHA512

    35e42fab04e2aafea1b716dda333785f698e56647c9d9ae59065e9cb920c735da294f73cf5aac9dec8ce40c9665073e2715a743c3f8c345a0a5f6c4da11ac8c1

  • SSDEEP

    24576:BfSPKoWX+pUiVC6NVRB6wKT2MSJd0VkJmp/m:B8DTV99rhdmWmp/

Malware Config

Targets

    • Target

      827825c27266ccb0c8dd6ada96ce43c2_JaffaCakes118

    • Size

      784KB

    • MD5

      827825c27266ccb0c8dd6ada96ce43c2

    • SHA1

      181584429278a7461f1d021e0fa5001a3b98da5e

    • SHA256

      a25f0b70a84b7df9e1d813ed06298cfeb17c8dc6445dbf24547d569d231322ae

    • SHA512

      35e42fab04e2aafea1b716dda333785f698e56647c9d9ae59065e9cb920c735da294f73cf5aac9dec8ce40c9665073e2715a743c3f8c345a0a5f6c4da11ac8c1

    • SSDEEP

      24576:BfSPKoWX+pUiVC6NVRB6wKT2MSJd0VkJmp/m:B8DTV99rhdmWmp/

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks