xmrig | b31dfb107533d6f9dedc853d1209e5fd22c2b9c700893d1b43600bf9f2c9005d | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

7

c858e6d063...18.exe

windows7-x64

c858e6d063...18.exe

windows10-2004-x64

Sharing

General

Target

c858e6d0638a21d9b7ce8809948500a8_JaffaCakes118
Size

784KB
Sample

240829-gywazszajl
MD5

c858e6d0638a21d9b7ce8809948500a8
SHA1

929db10219a045a77f3f2f987e1cb2b0eb440708
SHA256

b31dfb107533d6f9dedc853d1209e5fd22c2b9c700893d1b43600bf9f2c9005d
SHA512

c8b92216528cf343fd6ea9c40a7560921dbabeb5f2ac9159423e6640b179f6853195cc2b41ae569c45d19f1c48768801c3a2e06340c88155f10de8a27b53908e
SSDEEP

12288:e70cBrp2W3fTcyQdYwL0kBr26MVjtL2ZqGDlCMPf7AKCUq4XLe6ynykE7rVA3sD:e70cV8YLokkUjF2ArMPMKq4Zyyf/VWs

Score

10^/10

xmrig discovery miner upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

c858e6d0638a21d9b7ce8809948500a8_JaffaCakes118.exe

Resource

win7-20240708-en

xmrig discovery miner upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

c858e6d0638a21d9b7ce8809948500a8_JaffaCakes118.exe

Resource

win10v2004-20240802-en

xmrig discovery miner upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  c858e6d0638a21d9b7ce8809948500a8_JaffaCakes118
- Size
  
  784KB
- MD5
  
  c858e6d0638a21d9b7ce8809948500a8
- SHA1
  
  929db10219a045a77f3f2f987e1cb2b0eb440708
- SHA256
  
  b31dfb107533d6f9dedc853d1209e5fd22c2b9c700893d1b43600bf9f2c9005d
- SHA512
  
  c8b92216528cf343fd6ea9c40a7560921dbabeb5f2ac9159423e6640b179f6853195cc2b41ae569c45d19f1c48768801c3a2e06340c88155f10de8a27b53908e
- SSDEEP
  
  12288:e70cBrp2W3fTcyQdYwL0kBr26MVjtL2ZqGDlCMPf7AKCUq4XLe6ynykE7rVA3sD:e70cV8YLokkUjF2ArMPMKq4Zyyf/VWs
Score

10^/10

xmrig discovery miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

xmrigdiscoveryminerupx

behavioral2

xmrigdiscoveryminerupx

© 2018-2025

Terms | Privacy