Analysis
-
max time kernel
132s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
26-12-2024 21:54
General
-
Target
JaffaCakes118_d9550555780f2665050eb82ab1763f61425d1a988a243601fc862c7c0423785d.exe
-
Size
5.8MB
-
MD5
d2d6a23e8ecf74cf7917e2eff4a4b60f
-
SHA1
4ca12ffaa3690f25baa4c13f85c98862fda88a19
-
SHA256
d9550555780f2665050eb82ab1763f61425d1a988a243601fc862c7c0423785d
-
SHA512
f6261a80efc67207a0d688c37193b48d0705e59e5a2548b6730c41bdcdbdea41af26ac4aeb96e205c88440b8d826dbcf172439166f70da35fc6f3279d8b0919e
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUn:eOl56utgpPF8u/7n
Score
10/10
Malware Config
Signatures
-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d9550555780f2665050eb82ab1763f61425d1a988a243601fc862c7c0423785d.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d9550555780f2665050eb82ab1763f61425d1a988a243601fc862c7c0423785d.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
64KB
-
Filesize
3.3MB