xmrig | 05f7e2ab55c4d5a8759221e2d8b75bb285c6d7e5a617e6db9a5145bf8a224c3a | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

7

af83f6e366...18.exe

windows7-x64

af83f6e366...18.exe

windows10-2004-x64

Sharing

General

Target

af83f6e366160b79002fd26e8845ba49_JaffaCakes118
Size

784KB
Sample

240820-rd1ebazbnk
MD5

af83f6e366160b79002fd26e8845ba49
SHA1

0f0452068aafcaf4aca896b63a682b3ff5fc162e
SHA256

05f7e2ab55c4d5a8759221e2d8b75bb285c6d7e5a617e6db9a5145bf8a224c3a
SHA512

9892cd3953b377dd4b6d7eee4013e4cbc373a33d6208faf8729c65443d6799aeacaaa13493886962d0df23ad6f6558aa6e9421e029c7baacdcd579d69f0f45df
SSDEEP

12288:vBB9qrCu5fR1noe55YxltNokZE9wDagwOn7wbMQ7R8YGzCe57HbDYA915HUJRpVt:vBbw7kd7aBkkR8YQHIA91m3dY5Hm

Score

10^/10

xmrig discovery miner upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

af83f6e366160b79002fd26e8845ba49_JaffaCakes118.exe

Resource

win7-20240708-en

xmrig discovery miner upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

af83f6e366160b79002fd26e8845ba49_JaffaCakes118.exe

Resource

win10v2004-20240802-en

xmrig discovery miner upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  af83f6e366160b79002fd26e8845ba49_JaffaCakes118
- Size
  
  784KB
- MD5
  
  af83f6e366160b79002fd26e8845ba49
- SHA1
  
  0f0452068aafcaf4aca896b63a682b3ff5fc162e
- SHA256
  
  05f7e2ab55c4d5a8759221e2d8b75bb285c6d7e5a617e6db9a5145bf8a224c3a
- SHA512
  
  9892cd3953b377dd4b6d7eee4013e4cbc373a33d6208faf8729c65443d6799aeacaaa13493886962d0df23ad6f6558aa6e9421e029c7baacdcd579d69f0f45df
- SSDEEP
  
  12288:vBB9qrCu5fR1noe55YxltNokZE9wDagwOn7wbMQ7R8YGzCe57HbDYA915HUJRpVt:vBbw7kd7aBkkR8YQHIA91m3dY5Hm
Score

10^/10

xmrig discovery miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigdiscoveryminerupx

behavioral2

xmrigdiscoveryminerupx

© 2018-2025

Terms | Privacy