Analysis

  • max time kernel
    93s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-12-2024 12:46

General

  • Target

    JaffaCakes118_02ef147d5581f73c858b974b53c7d6c0fbeaa2823b10908f6f72a246524e69d3.exe

  • Size

    1.7MB

  • MD5

    65d1c9e181474ded1d395b0dfd2ab1be

  • SHA1

    8cb9f15aa8f421affdfcb8f6803656fcac3c993b

  • SHA256

    02ef147d5581f73c858b974b53c7d6c0fbeaa2823b10908f6f72a246524e69d3

  • SHA512

    fc8d7a8637fed446885eee771d457e19980563359b726d2b266fe026c1910c778583a8fc8321a3546bdcaa083ea5954a512ad7915f92dba45e8b0829de3df3a8

  • SSDEEP

    49152:EnCbL83y9FdfE0pZ0zCa4wI156uL3pgrCEdI:EniLf9FdfE0pZB156utgm

Score
10/10

Malware Config

Signatures

  • Xmrig family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 2 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_02ef147d5581f73c858b974b53c7d6c0fbeaa2823b10908f6f72a246524e69d3.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_02ef147d5581f73c858b974b53c7d6c0fbeaa2823b10908f6f72a246524e69d3.exe"
    1⤵
      PID:3348

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3348-0-0x00007FF765E40000-0x00007FF766194000-memory.dmp

      Filesize

      3.3MB

    • memory/3348-1-0x00007FF765E40000-0x00007FF766194000-memory.dmp

      Filesize

      3.3MB