Analysis

  • max time kernel
    91s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-12-2024 21:17

General

  • Target

    JaffaCakes118_694f5cac54049225c0bb8fa61b7df74233b3bb97288acff7a34f006430e1fbda.exe

  • Size

    1.2MB

  • MD5

    a805b70ff31f53f6f9617160fd36227b

  • SHA1

    7e20b18d9f6d475c0ae340da746b80024adda5bf

  • SHA256

    694f5cac54049225c0bb8fa61b7df74233b3bb97288acff7a34f006430e1fbda

  • SHA512

    6bde6026ab2eb4fe46c9fdefd29e91bb7099297599d78a19d3a21c7da6727ea056de22cd3154a58a4bd7090a32267a48de9fb0143a4e8ad84786f74e10e03d64

  • SSDEEP

    24576:EnCbLE/tyK3yt0mFdfE0bLBgDOph4THCGLQTfwlKjoIdBF672l6i20:EnCbL83y9FdfE0pZ0zCa4wI15d

Score
10/10

Malware Config

Signatures

  • Xmrig family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 2 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_694f5cac54049225c0bb8fa61b7df74233b3bb97288acff7a34f006430e1fbda.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_694f5cac54049225c0bb8fa61b7df74233b3bb97288acff7a34f006430e1fbda.exe"
    1⤵
      PID:3124

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3124-0-0x00007FF67CBC0000-0x00007FF67CF14000-memory.dmp

      Filesize

      3.3MB

    • memory/3124-1-0x00007FF67CBC0000-0x00007FF67CF14000-memory.dmp

      Filesize

      3.3MB