Overview

overview

10

Static

static

10

eadecc9d16...18.exe

windows7-x64

10

eadecc9d16...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    135s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240910-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-09-2024 07:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eadecc9d164580d3ce636f8ca95a9145_JaffaCakes118.exe

  • Size

    5.9MB

  • MD5

    eadecc9d164580d3ce636f8ca95a9145

  • SHA1

    6381dbcc6ebd2cb4d27122888205a0f55c328491

  • SHA256

    880821f2c6ec48ee5cf2aa70398d9fad76891e85f6a69bf85f284cd70d7a1eb6

  • SHA512

    5fcc3d2f9ec52028adc509aed3529ae1f5af9e9ebc71bbcaf6ba3f128de5b0ecf06fd987611e339d2f513a2395dd782f26a78d9acd742585e5814e5ce05365e4

  • SSDEEP

    98304:demTLkNdfE0pZ3u56utgpPFotBER/mQ32lUF:E+b56utgpPF8u/7F

Score
10/10
xmrigminerupx

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig
  • XMRig Miner payload 2 IoCs
    miner
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\eadecc9d164580d3ce636f8ca95a9145_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\eadecc9d164580d3ce636f8ca95a9145_JaffaCakes118.exe"
    1⤵
      PID:996

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/996-0-0x00007FF756F50000-0x00007FF7572A4000-memory.dmp

      Filesize

      3.3MB

      Download

    • memory/996-1-0x00007FF756F50000-0x00007FF7572A4000-memory.dmp

      Filesize

      3.3MB

      Download