Resubmissions

24/08/2024, 09:35

240824-lkmh5swanj 10

24/08/2024, 09:31

240824-lhafsstdpg 10

General

  • Target

    be5037ed959fa404f9d0d9dc7df0c5bd_JaffaCakes118

  • Size

    21.5MB

  • MD5

    be5037ed959fa404f9d0d9dc7df0c5bd

  • SHA1

    ce1030abfbad74dd9b23d3c10899b3856a2f154e

  • SHA256

    522d511aefee61643ddfff3b025ced176e13a87a935d8ed018155b585e01eab1

  • SHA512

    c5ca6280bc2e6504a5d0cb9741c41dc9a1d26188c206c948d3f87aab2f0bb39f51f29dee6f987e3607065d088d5bb5272ee7cf06086bb030d871582f40ac5543

  • SSDEEP

    393216:TFgRlWAz/W0W1FgRlWAz/W0WjMFgRlWAz/W0W1FgRlWAz/W0WjO:wznz0dznz0O

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • be5037ed959fa404f9d0d9dc7df0c5bd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections