Analysis
-
max time kernel
95s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2024 17:45
Behavioral task
behavioral1
Sample
JaffaCakes118_dbd9f18d4cfbd42518a3c6de872adc9546908277d59c13274f49c8d386adbd65.exe
Resource
win7-20241010-en
windows7-x64
11 signatures
150 seconds
General
-
Target
JaffaCakes118_dbd9f18d4cfbd42518a3c6de872adc9546908277d59c13274f49c8d386adbd65.exe
-
Size
6.0MB
-
MD5
9eee43712184c0f7711cb6d1010c8481
-
SHA1
87b99df61d10454da9560a11362006c0e87e4695
-
SHA256
dbd9f18d4cfbd42518a3c6de872adc9546908277d59c13274f49c8d386adbd65
-
SHA512
e007eda1de792aa57d55c4bc3ebd60c1804936f32c7a1a0bfce6ef5eddde6f23d6f71091ba5f3e873f084772e39560b0df32481849a49bfb7dd608a2c0496c80
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUO:eOl56utgpPF8u/7O
Malware Config
Signatures
-
Xmrig family
-
XMRig Miner payload 2 IoCs
resource yara_rule behavioral2/memory/4716-0-0x00007FF797580000-0x00007FF7978D4000-memory.dmp xmrig behavioral2/memory/4716-1-0x00007FF797580000-0x00007FF7978D4000-memory.dmp xmrig -
resource yara_rule behavioral2/memory/4716-0-0x00007FF797580000-0x00007FF7978D4000-memory.dmp upx