General

  • Target

    bc63d8596d231f91be94070b379b4889_JaffaCakes118

  • Size

    784KB

  • Sample

    240823-tcwqvatdlc

  • MD5

    bc63d8596d231f91be94070b379b4889

  • SHA1

    4e9a8d067004987fbbc4708b9a1a8d0989715b2d

  • SHA256

    353345e3fad59d9e9b3f9f05c555337c517a08537dc1ec940eb42097f6065223

  • SHA512

    c7c27b520c522fcc28a54851fd5723229cbdea169c0e8b8f8d0caab51aae5322b14f25e5b8ab7192c791dc1d25ddfc8144268d432e2882fa9c986dae40e33e1c

  • SSDEEP

    24576:j4gSQnJRAuYwlJ/vfdG5swME50wZNjmiYSbu+:8gSQoudZQ5xME9jmR

Malware Config

Targets

    • Target

      bc63d8596d231f91be94070b379b4889_JaffaCakes118

    • Size

      784KB

    • MD5

      bc63d8596d231f91be94070b379b4889

    • SHA1

      4e9a8d067004987fbbc4708b9a1a8d0989715b2d

    • SHA256

      353345e3fad59d9e9b3f9f05c555337c517a08537dc1ec940eb42097f6065223

    • SHA512

      c7c27b520c522fcc28a54851fd5723229cbdea169c0e8b8f8d0caab51aae5322b14f25e5b8ab7192c791dc1d25ddfc8144268d432e2882fa9c986dae40e33e1c

    • SSDEEP

      24576:j4gSQnJRAuYwlJ/vfdG5swME50wZNjmiYSbu+:8gSQoudZQ5xME9jmR

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks