General

  • Target

    8679c765730cf842de71b8a7007d9d52_JaffaCakes118

  • Size

    784KB

  • Sample

    240810-r5xshayamh

  • MD5

    8679c765730cf842de71b8a7007d9d52

  • SHA1

    8bc6979e280d0234762733e91dffde59b3bcd04f

  • SHA256

    75c27a222e3a398ebfc8a0e734a8b60f23c6db4f259b8ea6662ef6a6d5f4a7a8

  • SHA512

    77c3745585c1504fd33d9345b7bfb4ffc01d5a7672e251846c7965f2bcf96e5625543cfe2ec1652cf5e59c79bfef560d27949e9744a5b8e4deed3851a24b8124

  • SSDEEP

    24576:OZv89SUaRNxrBf4KbfNsbXAvI9RwNvfsXWbZ/b:OZ5Nl9+bH8xfsXMZ

Malware Config

Targets

    • Target

      8679c765730cf842de71b8a7007d9d52_JaffaCakes118

    • Size

      784KB

    • MD5

      8679c765730cf842de71b8a7007d9d52

    • SHA1

      8bc6979e280d0234762733e91dffde59b3bcd04f

    • SHA256

      75c27a222e3a398ebfc8a0e734a8b60f23c6db4f259b8ea6662ef6a6d5f4a7a8

    • SHA512

      77c3745585c1504fd33d9345b7bfb4ffc01d5a7672e251846c7965f2bcf96e5625543cfe2ec1652cf5e59c79bfef560d27949e9744a5b8e4deed3851a24b8124

    • SSDEEP

      24576:OZv89SUaRNxrBf4KbfNsbXAvI9RwNvfsXWbZ/b:OZ5Nl9+bH8xfsXMZ

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks