Analysis

  • max time kernel
    95s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2024 17:43

General

  • Target

    JaffaCakes118_08471d451c71bc816db388a23eaf2886f2b4ca0f1e23484cb585a7839f0246c5.exe

  • Size

    6.0MB

  • MD5

    6db2d9d7a4583be8454e143809e71828

  • SHA1

    5e474d65eb3bef328242897cce080688130e3742

  • SHA256

    08471d451c71bc816db388a23eaf2886f2b4ca0f1e23484cb585a7839f0246c5

  • SHA512

    cc6942f816f67c4e4c81cceb531a80a6b51615cca12d41328c9123e3b1ea78ad979b35f97816146f3a660a640b50484ad2d201dd434432cac2754f86584a42da

  • SSDEEP

    98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUp:eOl56utgpPF8u/7p

Score
10/10

Malware Config

Signatures

  • Xmrig family
  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

  • XMRig Miner payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_08471d451c71bc816db388a23eaf2886f2b4ca0f1e23484cb585a7839f0246c5.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_08471d451c71bc816db388a23eaf2886f2b4ca0f1e23484cb585a7839f0246c5.exe"
    1⤵
      PID:4156

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4156-0-0x00007FF7ACA40000-0x00007FF7ACD94000-memory.dmp

      Filesize

      3.3MB