Overview

overview

10

Static

static

10

dc0a63ab57...18.exe

windows7-x64

10

dc0a63ab57...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc0a63ab5754a86792e37dc24a615272_JaffaCakes118

  • Size

    1.6MB

  • MD5

    dc0a63ab5754a86792e37dc24a615272

  • SHA1

    8a4a334910e55a211f323f6c278b52975b66a74a

  • SHA256

    119e5dde549a056da95e732cac3c194b403182b637527b00ac9a9ed94bafdf9a

  • SHA512

    2bd23bc6961b8d3f46907f9633689e6d1729b787508394b7885257f3b6ccb46e911b0160942c921b2b35ab1ada45ba04af7c82a4249a08411e56bad93b57ef6a

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfUgSavA5G:knw9oUUEEDlGUjc2HhG82DiBAG

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dc0a63ab5754a86792e37dc24a615272_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections