Analysis
-
max time kernel
95s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
23-12-2024 17:32
Behavioral task
behavioral1
Sample
JaffaCakes118_9bcc663d062a19d092cd33dbf6a1d66025a2de12981f1a302465097340e784ea.exe
Resource
win7-20240729-en
windows7-x64
11 signatures
150 seconds
General
-
Target
JaffaCakes118_9bcc663d062a19d092cd33dbf6a1d66025a2de12981f1a302465097340e784ea.exe
-
Size
6.0MB
-
MD5
d477805075dd779ebf8b460ea276f59d
-
SHA1
4f9ac27f7cba79bbab3660e30a1ab81489cdb06c
-
SHA256
9bcc663d062a19d092cd33dbf6a1d66025a2de12981f1a302465097340e784ea
-
SHA512
3c396d0dc0f9e1b4c79cb7bc6df139b52f018031b81e3ddcfb5311bd8cc2865d3d5b3b1ef6fa4907fe87d2f48231ade5eef42f501447d04d2fd59be717a5fffc
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUB:eOl56utgpPF8u/7B
Malware Config
Signatures
-
Xmrig family
-
XMRig Miner payload 2 IoCs
resource yara_rule behavioral2/memory/3872-0-0x00007FF65DC90000-0x00007FF65DFE4000-memory.dmp xmrig behavioral2/memory/3872-1-0x00007FF65DC90000-0x00007FF65DFE4000-memory.dmp xmrig -
resource yara_rule behavioral2/memory/3872-0-0x00007FF65DC90000-0x00007FF65DFE4000-memory.dmp upx