General

  • Target

    954ac047da3c2f16d133465ad187db94_JaffaCakes118

  • Size

    784KB

  • Sample

    240814-j5zyvswgqp

  • MD5

    954ac047da3c2f16d133465ad187db94

  • SHA1

    a0e5d31fc3ac43b02b3235cb75062f82eb50a0ad

  • SHA256

    47873d95b5902818ef9d3a6679772986e5cdfc7ed365c92a36a5c7bc35a3ac6e

  • SHA512

    43c2ac79cf26d7aefc4f7a47d7cc2f56dd3161fe18b137269b0184e5e2699919047c9c4e8eb108fdacb51a600089595fc2d89ead4e741f0d331841370575cc2c

  • SSDEEP

    24576:CQ9hdIf4eAujCt/yTQHB2hK/7HTgOKqgrgLY+B:CsXFtiCMTQh2hK/7cGKgfB

Malware Config

Targets

    • Target

      954ac047da3c2f16d133465ad187db94_JaffaCakes118

    • Size

      784KB

    • MD5

      954ac047da3c2f16d133465ad187db94

    • SHA1

      a0e5d31fc3ac43b02b3235cb75062f82eb50a0ad

    • SHA256

      47873d95b5902818ef9d3a6679772986e5cdfc7ed365c92a36a5c7bc35a3ac6e

    • SHA512

      43c2ac79cf26d7aefc4f7a47d7cc2f56dd3161fe18b137269b0184e5e2699919047c9c4e8eb108fdacb51a600089595fc2d89ead4e741f0d331841370575cc2c

    • SSDEEP

      24576:CQ9hdIf4eAujCt/yTQHB2hK/7HTgOKqgrgLY+B:CsXFtiCMTQh2hK/7cGKgfB

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks