Overview

overview

10

Static

static

7

c858e6d063...18.exe

windows7-x64

10

c858e6d063...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c858e6d0638a21d9b7ce8809948500a8_JaffaCakes118

  • Size

    784KB

  • Sample

    240829-gywazszajl

  • MD5

    c858e6d0638a21d9b7ce8809948500a8

  • SHA1

    929db10219a045a77f3f2f987e1cb2b0eb440708

  • SHA256

    b31dfb107533d6f9dedc853d1209e5fd22c2b9c700893d1b43600bf9f2c9005d

  • SHA512

    c8b92216528cf343fd6ea9c40a7560921dbabeb5f2ac9159423e6640b179f6853195cc2b41ae569c45d19f1c48768801c3a2e06340c88155f10de8a27b53908e

  • SSDEEP

    12288:e70cBrp2W3fTcyQdYwL0kBr26MVjtL2ZqGDlCMPf7AKCUq4XLe6ynykE7rVA3sD:e70cV8YLokkUjF2ArMPMKq4Zyyf/VWs

Score
10/10
xmrigdiscoveryminerupx

Malware Config

Targets

    • Target

      c858e6d0638a21d9b7ce8809948500a8_JaffaCakes118

    • Size

      784KB

    • MD5

      c858e6d0638a21d9b7ce8809948500a8

    • SHA1

      929db10219a045a77f3f2f987e1cb2b0eb440708

    • SHA256

      b31dfb107533d6f9dedc853d1209e5fd22c2b9c700893d1b43600bf9f2c9005d

    • SHA512

      c8b92216528cf343fd6ea9c40a7560921dbabeb5f2ac9159423e6640b179f6853195cc2b41ae569c45d19f1c48768801c3a2e06340c88155f10de8a27b53908e

    • SSDEEP

      12288:e70cBrp2W3fTcyQdYwL0kBr26MVjtL2ZqGDlCMPf7AKCUq4XLe6ynykE7rVA3sD:e70cV8YLokkUjF2ArMPMKq4Zyyf/VWs

    Score
    10/10
    xmrigdiscoveryminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks