General

  • Target

    a296bb7ee622fae12440b9b1dc5c9033_JaffaCakes118

  • Size

    784KB

  • Sample

    240817-p1nypawdrf

  • MD5

    a296bb7ee622fae12440b9b1dc5c9033

  • SHA1

    4cfea6a8ea6da1536053795020813233eacb1006

  • SHA256

    2ddcdd2931a39a5ae60e360b7aa25ed772de73e1c138841b52ef13cc4ecd6650

  • SHA512

    1f4d75343bdec3f0fe99b8e9b3df75021890ec5af79c03e6f692faf292057c943698ceda67f01373fd42b994aecf1b28cb994ba1d1243f0a5eb2f984f9e021f2

  • SSDEEP

    24576:J0RQRxAvsj0ojLzw5TdJhCqj410O7x8e:qCivs/k9drRM10OF

Malware Config

Targets

    • Target

      a296bb7ee622fae12440b9b1dc5c9033_JaffaCakes118

    • Size

      784KB

    • MD5

      a296bb7ee622fae12440b9b1dc5c9033

    • SHA1

      4cfea6a8ea6da1536053795020813233eacb1006

    • SHA256

      2ddcdd2931a39a5ae60e360b7aa25ed772de73e1c138841b52ef13cc4ecd6650

    • SHA512

      1f4d75343bdec3f0fe99b8e9b3df75021890ec5af79c03e6f692faf292057c943698ceda67f01373fd42b994aecf1b28cb994ba1d1243f0a5eb2f984f9e021f2

    • SSDEEP

      24576:J0RQRxAvsj0ojLzw5TdJhCqj410O7x8e:qCivs/k9drRM10OF

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks