Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2024 05:04

General

  • Target

    JaffaCakes118_0e84a37a4880403290fa9f0a0ad3a0244c729d25b39a245e0da55a7b23eef4c4.exe

  • Size

    6.0MB

  • MD5

    91c122110b2c5830eb3895e426b13e89

  • SHA1

    16d9ab3c793de0d0cba658c7de25b94fa52c0082

  • SHA256

    0e84a37a4880403290fa9f0a0ad3a0244c729d25b39a245e0da55a7b23eef4c4

  • SHA512

    54c95773bb4059824169d44dd5a3eee500177cdcd1ed5ab9482b3f739be740e6a924e735900871ba167db271be797fdd96c23788385c71315e3d805b2ced484f

  • SSDEEP

    98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUF:eOl56utgpPF8u/7F

Score
10/10

Malware Config

Signatures

  • Xmrig family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_0e84a37a4880403290fa9f0a0ad3a0244c729d25b39a245e0da55a7b23eef4c4.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_0e84a37a4880403290fa9f0a0ad3a0244c729d25b39a245e0da55a7b23eef4c4.exe"
    1⤵
      PID:5032

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5032-0-0x00007FF6C3DC0000-0x00007FF6C4114000-memory.dmp

      Filesize

      3.3MB