Overview

overview

10

Static

static

10

die_win64_...re.dll

windows7-x64

1

die_win64_...re.dll

windows10-2004-x64

1

die_win64_...ui.dll

windows7-x64

1

die_win64_...ui.dll

windows10-2004-x64

1

die_win64_...rk.dll

windows7-x64

1

die_win64_...rk.dll

windows10-2004-x64

1

die_win64_...GL.dll

windows7-x64

1

die_win64_...GL.dll

windows10-2004-x64

1

die_win64_...pt.dll

windows7-x64

1

die_win64_...pt.dll

windows10-2004-x64

1

die_win64_...ls.dll

windows7-x64

1

die_win64_...ls.dll

windows10-2004-x64

1

die_win64_...vg.dll

windows7-x64

1

die_win64_...vg.dll

windows10-2004-x64

1

die_win64_...ts.dll

windows7-x64

1

die_win64_...ts.dll

windows10-2004-x64

1

die_win64_...ACE.js

windows7-x64

3

die_win64_...ACE.js

windows10-2004-x64

3

die_win64_...I.1.js

windows7-x64

3

die_win64_...I.1.js

windows10-2004-x64

3

die_win64_...y.1.js

windows7-x64

3

die_win64_...y.1.js

windows10-2004-x64

3

die_win64_...R.1.js

windows7-x64

3

die_win64_...R.1.js

windows10-2004-x64

3

die_win64_...b.1.js

windows7-x64

3

die_win64_...b.1.js

windows10-2004-x64

3

die_win64_...o.1.js

windows7-x64

3

die_win64_...o.1.js

windows10-2004-x64

3

die_win64_...O.1.js

windows7-x64

3

die_win64_...O.1.js

windows10-2004-x64

3

die_win64_...G.1.js

windows7-x64

3

die_win64_...G.1.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_597c644db7648b6ccc73d997b23b04be5053e352ecad38dd09936922d29df035

  • Size

    18.2MB

  • Sample

    241223-tvy9pavlar

  • MD5

    22a0e8227ed4936b7187a26ab816da40

  • SHA1

    3cf0767cb436c4f2ce344cfce2eada02c1d2a462

  • SHA256

    597c644db7648b6ccc73d997b23b04be5053e352ecad38dd09936922d29df035

  • SHA512

    387c83a7badc309a09b74865422debc5066d5b89384eaf55d0a686b112c518d1e09b9d13714076a6c3915e5d3e1c782b158b4efbfb6fa1927f552abc0d936931

  • SSDEEP

    393216:toxCnyITD2qmD6pAYRwdhAqB9QhSNNnNocplmcF5H8pHURs6SF1:tyS2qVQ9Q8hZpfT6/1

Score
10/10
xmrigexecutionmacrominer

Malware Config

Targets

    • Target

      die_win64_portable/Qt5Core.dll

    • Size

      5.7MB

    • MD5

      817520432a42efa345b2d97f5c24510e

    • SHA1

      fea7b9c61569d7e76af5effd726b7ff6147961e5

    • SHA256

      8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a

    • SHA512

      8673b26ec5421fce8e23adf720de5690673bb4ce6116cb44ebcc61bbbef12c0ad286dfd675edbed5d8d000efd7609c81aae4533180cf4ec9cd5316e7028f7441

    • SSDEEP

      98304:hcirJylHYab/6bMJsv6tWKFdu9CLiZxqfg8gwf:+irJylHFb/QMJsv6tWKFdu9CL4xqfg8x

    Score
    1/10
    behavioral1behavioral2

    • Target

      die_win64_portable/Qt5Gui.dll

    • Size

      6.7MB

    • MD5

      47307a1e2e9987ab422f09771d590ff1

    • SHA1

      0dfc3a947e56c749a75f921f4a850a3dcbf04248

    • SHA256

      5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e

    • SHA512

      21b1c133334c7ca7bbbe4f00a689c580ff80005749da1aa453cceb293f1ad99f459ca954f54e93b249d406aea038ad3d44d667899b73014f884afdbd9c461c14

    • SSDEEP

      49152:9VPhJZWVvpg+za3cFlc61j2VjBW77I4iNlmLPycNRncuUx24LLsXZFC6FOCfDt2/:BJZzI1ZR3U9Cxc22aDACInVc4Z

    Score
    1/10
    behavioral3behavioral4

    • Target

      die_win64_portable/Qt5Network.dll

    • Size

      1.3MB

    • MD5

      3569693d5bae82854de1d88f86c33184

    • SHA1

      1a6084acfd2aa4d32cedfb7d9023f60eb14e1771

    • SHA256

      4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1

    • SHA512

      e5eff4a79e1bdae28a6ca0da116245a9919023560750fc4a087cdcd0ab969c2f0eeec63bbec2cd5222d6824a01dd27d2a8e6684a48202ea733f9bb2fab048b32

    • SSDEEP

      24576:eXPn73RXox1U9M0m+1ffSDY565RzHUY1iaRy95hdGehEM:+7hXU1U95m4ff9A5RviaRy9NGI

    Score
    1/10
    behavioral5behavioral6

    • Target

      die_win64_portable/Qt5OpenGL.dll

    • Size

      313KB

    • MD5

      b1f29ea399c173c50c64ffca5f13dc7f

    • SHA1

      4a039aff59f34bae66aa24a0c349059795bf13b2

    • SHA256

      0e179470446a14c3706182d88fc95e5c066957c3752defdd6d3649ae877c87a2

    • SHA512

      0b95e7209cdbb1e977860e8a41e73c5232e682ef111a34a57762fa6bc83d8c3126bcd38069e1d8fb72703f356608f98c103717377493d41e0f4eb5caa024d79b

    • SSDEEP

      6144:dtqkKC7BjQV5eR1b+yRWsJQnNfckNI+STEDC4nkml+T/6qhdDqvJbb9fv:HRFe5en+gWUCNTF9fv

    Score
    1/10
    behavioral7behavioral8

    • Target

      die_win64_portable/Qt5Script.dll

    • Size

      1.2MB

    • MD5

      03c6c0a60c0d3e7fa86b4388f4cbccb6

    • SHA1

      cddaa47fd8c1a7de32c2376f27edcfc594e92074

    • SHA256

      0b58e5e79df13110a8258f14d7b3658d1dd0c8dddc337a164b89d4ac12a0638f

    • SHA512

      a297db87ee1055190580ad2bc539e89e38729dcb9ea9075dc535b05cb45c62f1b0fc99d8866047383cf519d7dde4016cc4ee0d5796190635aeb3d5c2f5e7cd2b

    • SSDEEP

      24576:xO2knvJZKtd04kMCZZGiCS2BULn64WYdyczxJlH:xO2knvJZIgMCqonlrDH

    Score
    1/10
    behavioral10behavioral9

    • Target

      die_win64_portable/Qt5ScriptTools.dll

    • Size

      555KB

    • MD5

      dd9fecbf34374972577a058e5a4c7c3d

    • SHA1

      16c3114a75a2eced0104428dc779a3dbda951cc0

    • SHA256

      ad25c27bc99075b4883a9bf7943954094885798969038d46785e0fd1ec1ccbc2

    • SHA512

      8aeeca34b63930564d42056ca1b7d3c59d6fe017b19e86fb294fafab982a014b09bbc40f32a9cc5d36c8afa13d7863ba4f144ab6a4af465acbc8a6a72f6d8554

    • SSDEEP

      12288:HnZlvw+mZfMDFfRRLLUTF5xQFa3J5cbQ0:HnZlvw+mVmFfRRLLYFHQF

    Score
    1/10
    behavioral11behavioral12

    • Target

      die_win64_portable/Qt5Svg.dll

    • Size

      322KB

    • MD5

      03761f923e52a7269a6e3a7452f6be93

    • SHA1

      2ce53c424336bcc8047e10fa79ce9bce14059c50

    • SHA256

      7348cfc6444438b8845fb3f59381227325d40ca2187d463e82fc7b8e93e38db5

    • SHA512

      de0ff8ebffc62af279e239722e6eedd0b46bc213e21d0a687572bfb92ae1a1e4219322233224ca8b7211ffef52d26cb9fe171d175d2390e3b3e6710bbda010cb

    • SSDEEP

      6144:6qLZcTC3wR/0JNZ+csBkBv0L0hq+SvcO8MsvwbIeblsjTR:6qNcCwqHE2fYlsPR

    Score
    1/10
    behavioral13behavioral14

    • Target

      die_win64_portable/Qt5Widgets.dll

    • Size

      5.2MB

    • MD5

      4cd1f8fdcd617932db131c3688845ea8

    • SHA1

      b090ed884b07d2d98747141aefd25590b8b254f9

    • SHA256

      3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358

    • SHA512

      7d47d2661bf8fac937f0d168036652b7cfe0d749b571d9773a5446c512c58ee6bb081fec817181a90f4543ebc2367c7f8881ff7f80908aa48a7f6bb261f1d199

    • SSDEEP

      49152:KO+LIFYAPZtMym9RRQ7/KKIXSewIa/2Xqq1sfeOoKGOh6EwNmiHYYwBrK8KMlH0p:IGoKZdRqJD10rK8KMlH0gi5GX0oKZ

    Score
    1/10
    behavioral15behavioral16

    • Target

      die_win64_portable/db/ACE

    • Size

      1KB

    • MD5

      eabf535824e6da23168b476f46c339c2

    • SHA1

      fa86fb1dc0213b4f0e09d226baf259113f8d4fab

    • SHA256

      6280ef69e17a5bf7fbb4555f801213affc7fd32ecd2db18939469a27a7429df8

    • SHA512

      2371d4ceed160ff8e1223e5ada219dda88500b2929cbc6dd50c2d3d2a7468af9d0df2887b83d3b01847d775e635dc0c65c745c54704ef0957ffdcb793db5b256

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      die_win64_portable/db/Binary/ANI.1.sg

    • Size

      1KB

    • MD5

      4824d2f9586bcca78ad5f7acd54bbe69

    • SHA1

      ffc02c8cbdc0bfe35ab52ff099a50a1cd3338952

    • SHA256

      7ebc2940dca53bb910b3d48700d2be2077d999b797e18db9f1586b2a540cf835

    • SHA512

      c62ba484dfc0131deef60eb6bfd111fe052a31f70f546d869fa2391d239e48789d935eb0bbf499e0916b7f7ed395d25df028256be1a708d3455cf2a8eb2b862f

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      die_win64_portable/db/Binary/COFF library.1.sg

    • Size

      954B

    • MD5

      67bc3e3985f6cf022d71b17ec2f79083

    • SHA1

      6aa46a309854e5d746d8effceda731ff899a1b5b

    • SHA256

      b636d51986bbf44905f93fd2af56421140b78f709e0972ef27904ef4a7ec6b3a

    • SHA512

      9ce9bbfbc3e8942833b81ac98fb58162bff7cb3705abd7fa91b67a2604f90abcc0a743ae817dfde89d8e4a43709c8c7336f43e7e6e2f93292446cf4d6dc2ba2a

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      die_win64_portable/db/Binary/CUR.1.sg

    • Size

      1KB

    • MD5

      40b1c3402c044a53a79b5a7c34dd471e

    • SHA1

      15032388a516d35079973bfeac43e7a565e15f83

    • SHA256

      e45b1bb8c02c30335f646338e6896d160b036ee70a1cc90a70364a48a125d57b

    • SHA512

      98dfad658db390297b88135fc5f83607910d81dc1fb17d9c4413a816d6c6c5fee1dd54a97cfb485c22832c4c9203d9f65da7652c7bf7089b6520f1f69e203ff3

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      die_win64_portable/db/Binary/Cab.1.sg

    • Size

      664B

    • MD5

      ca39c12a726c7d8b0b7c2fac4b9aaae5

    • SHA1

      57660ea49fe2885443c8e5766d84abd320cf72d6

    • SHA256

      d1ef3625bc7d265f6cd35db9d3764e8cb375fb1ae2969d47edca96aa87ecbc7b

    • SHA512

      7fd3d659d9b667cd08a761f9991dc5d61fa066d24ac8df4bf6b642de6ca69fa6daa41da95250c25281bb03408cead44c24d47358ba33c2fd92056d4b4001cca5

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      die_win64_portable/db/Binary/GuitarPro.1.sg

    • Size

      3KB

    • MD5

      1b9d75eb5ff7cd9b8b16b2607a56509a

    • SHA1

      beec8bc83e001629f9eb739fb966e10456415297

    • SHA256

      320bed52b5a37d3f2307745b543dfe0879a41c6858a81047b798cff7894ae632

    • SHA512

      4d4ced0958add0b67ad00f9306affc13436ab193ed78016b451e38bdbf6311e22af84c449e77b1780eb9b111484c638e7fb8199137388befc304b1b56a8df885

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      die_win64_portable/db/Binary/ICO.1.sg

    • Size

      1KB

    • MD5

      42d6ad9da510ee08ca80608ac35d3dfd

    • SHA1

      81efef52e86860b469fe4319188c0717d7922697

    • SHA256

      27a2ffd08f252e732c5baa3de44c6d5cad29b3e25b3a4902b6f1f3c97b2d3174

    • SHA512

      76d318bdecc3fd798f39246c2f62653044f64e5ecfa1242445c2de4a1bccfe3481a790a41ca37adcde1c499e22c4785b1dde96b0b8722e54e8f412b28cbe4013

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      die_win64_portable/db/Binary/JPEG.1.sg

    • Size

      1KB

    • MD5

      d7d952a06ed7f0efe1f335192de24316

    • SHA1

      f8d59ff140b900761de26077aae7e85de47e41ed

    • SHA256

      c88eed9c24b70ce02bb9e3dceb952c47ed1e24d88484763b0c222114e569025b

    • SHA512

      425132decf746b67b4e1f99458a4231b9f0a7fbeff7b129bbca348aa5e919b1df43db69cb55f0703e16a7739e8adbd8c26d9560a1c234714d56ae630825e10b9

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

macrominerxmrig
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10