General

  • Target

    aefe27efe9ced5f8e7cef4a9f4d61200_JaffaCakes118

  • Size

    784KB

  • Sample

    240820-nag7sasdkp

  • MD5

    aefe27efe9ced5f8e7cef4a9f4d61200

  • SHA1

    f4abcb903353e2378180b74774fd66b6deb339d6

  • SHA256

    8dc9d470094f5987cbb00e824767fb595529585b283b45b4066f8b3a40c1f400

  • SHA512

    c7b321996922ac67fbf2cf26e315da341a9d99df538d2f32b159d7ec3ce5bedd98d1266e87ed6b55396cb6913d0c52d2c25d18f20461e73d878f6a29d9ac96b7

  • SSDEEP

    24576:n8bmP/8N5+3LWDrhWLG2Coo3S6N9udsRL1:n8KP/8N5CLQ1/7S67

Malware Config

Targets

    • Target

      aefe27efe9ced5f8e7cef4a9f4d61200_JaffaCakes118

    • Size

      784KB

    • MD5

      aefe27efe9ced5f8e7cef4a9f4d61200

    • SHA1

      f4abcb903353e2378180b74774fd66b6deb339d6

    • SHA256

      8dc9d470094f5987cbb00e824767fb595529585b283b45b4066f8b3a40c1f400

    • SHA512

      c7b321996922ac67fbf2cf26e315da341a9d99df538d2f32b159d7ec3ce5bedd98d1266e87ed6b55396cb6913d0c52d2c25d18f20461e73d878f6a29d9ac96b7

    • SSDEEP

      24576:n8bmP/8N5+3LWDrhWLG2Coo3S6N9udsRL1:n8KP/8N5CLQ1/7S67

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks