Overview

overview

10

Static

static

10

JaffaCakes...20.exe

windows7-x64

10

JaffaCakes...20.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    95s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-12-2024 05:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JaffaCakes118_180527dd19e4985279eaeac7892b6a1e213e34fa3cd55dafcce91225bc2c6720.exe

  • Size

    1.3MB

  • MD5

    40f3437cad62a8f3183aa91923e3c2d3

  • SHA1

    ee9440e0c3eebe1ae652eb6a1ca646b3fd1f7275

  • SHA256

    180527dd19e4985279eaeac7892b6a1e213e34fa3cd55dafcce91225bc2c6720

  • SHA512

    66f47d32ef93d8091ae9e285fc28b2ce8554b2b5288ed8d90c1e32ce62bddc1bf72608475ecdffeb65b496c277884260d5443c268b5c43b3a75bfc32c30f93a7

  • SSDEEP

    24576:EnCbLE/tyK3yt0mFdfE0bLBgDOph4THCGLQTfwlKjoIdBF672l6i2Ncb2ygupgu:EnCbL83y9FdfE0pZ0zCa4wI156uL3pgu

Score
10/10
xmrigminerupx

Malware Config

Signatures

  • Xmrig family
    xmrig
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig
  • XMRig Miner payload 2 IoCs
    miner
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_180527dd19e4985279eaeac7892b6a1e213e34fa3cd55dafcce91225bc2c6720.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_180527dd19e4985279eaeac7892b6a1e213e34fa3cd55dafcce91225bc2c6720.exe"
    1⤵
      PID:4116

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4116-0-0x00007FF7F00F0000-0x00007FF7F0444000-memory.dmp

      Filesize

      3.3MB

      Download

    • memory/4116-1-0x00007FF7F00F0000-0x00007FF7F0444000-memory.dmp

      Filesize

      3.3MB

      Download