Overview

overview

10

Static

static

10

d6631ae8b2...18.exe

windows7-x64

10

d6631ae8b2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6631ae8b22eee8119dc2e66416b9288_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240909-qhp9gazcnj

  • MD5

    d6631ae8b22eee8119dc2e66416b9288

  • SHA1

    d93d23eba200c66aec03097cfa669cf26db72cd6

  • SHA256

    52281a4b14890fc11acf69674080723486720675de9d2bb858f548f6d4c7698f

  • SHA512

    b818eca5adaed1ea40b9e95282626ccb236253c9a21544f48e3e1c050b09eca5c75284bb2deb8722fbf65cd658fb349173fa76204973af40ffa2026ad1760f43

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBMZ:knw9oUUEEDl37jcq4+

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      d6631ae8b22eee8119dc2e66416b9288_JaffaCakes118

    • Size

      1.1MB

    • MD5

      d6631ae8b22eee8119dc2e66416b9288

    • SHA1

      d93d23eba200c66aec03097cfa669cf26db72cd6

    • SHA256

      52281a4b14890fc11acf69674080723486720675de9d2bb858f548f6d4c7698f

    • SHA512

      b818eca5adaed1ea40b9e95282626ccb236253c9a21544f48e3e1c050b09eca5c75284bb2deb8722fbf65cd658fb349173fa76204973af40ffa2026ad1760f43

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBMZ:knw9oUUEEDl37jcq4+

    Score
    10/10
    xmrigminerupxpersistenceprivilege_escalation

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks