Overview
overview
10Static
static
mine_aeternity.bat
windows7_x64
1mine_aeternity.bat
windows10_x64
1mine_aion.bat
windows7_x64
1mine_aion.bat
windows10_x64
1mine_beam.bat
windows7_x64
1mine_beam.bat
windows10_x64
1mine_btcz.bat
windows7_x64
1mine_btcz.bat
windows10_x64
1mine_btg.bat
windows7_x64
1mine_btg.bat
windows10_x64
1mine_grin29.bat
windows7_x64
1mine_grin29.bat
windows10_x64
1mine_grin31.bat
windows7_x64
1mine_grin31.bat
windows10_x64
1mine_mnx.bat
windows7_x64
1mine_mnx.bat
windows10_x64
1mine_swap.bat
windows7_x64
1mine_swap.bat
windows10_x64
1mine_zero.bat
windows7_x64
1mine_zero.bat
windows10_x64
1miner.exe
windows7_x64
10miner.exe
windows10_x64
10Analysis
-
max time kernel
43s -
max time network
119s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
18-01-2021 15:47
Static task
static1
Behavioral task
behavioral1
Sample
mine_aeternity.bat
Resource
win7v20201028
Behavioral task
behavioral2
Sample
mine_aeternity.bat
Resource
win10v20201028
Behavioral task
behavioral3
Sample
mine_aion.bat
Resource
win7v20201028
Behavioral task
behavioral4
Sample
mine_aion.bat
Resource
win10v20201028
Behavioral task
behavioral5
Sample
mine_beam.bat
Resource
win7v20201028
Behavioral task
behavioral6
Sample
mine_beam.bat
Resource
win10v20201028
Behavioral task
behavioral7
Sample
mine_btcz.bat
Resource
win7v20201028
Behavioral task
behavioral8
Sample
mine_btcz.bat
Resource
win10v20201028
Behavioral task
behavioral9
Sample
mine_btg.bat
Resource
win7v20201028
Behavioral task
behavioral10
Sample
mine_btg.bat
Resource
win10v20201028
Behavioral task
behavioral11
Sample
mine_grin29.bat
Resource
win7v20201028
Behavioral task
behavioral12
Sample
mine_grin29.bat
Resource
win10v20201028
Behavioral task
behavioral13
Sample
mine_grin31.bat
Resource
win7v20201028
Behavioral task
behavioral14
Sample
mine_grin31.bat
Resource
win10v20201028
Behavioral task
behavioral15
Sample
mine_mnx.bat
Resource
win7v20201028
Behavioral task
behavioral16
Sample
mine_mnx.bat
Resource
win10v20201028
Behavioral task
behavioral17
Sample
mine_swap.bat
Resource
win7v20201028
Behavioral task
behavioral18
Sample
mine_swap.bat
Resource
win10v20201028
Behavioral task
behavioral19
Sample
mine_zero.bat
Resource
win7v20201028
Behavioral task
behavioral20
Sample
mine_zero.bat
Resource
win10v20201028
Behavioral task
behavioral21
Sample
miner.exe
Resource
win7v20201028
Behavioral task
behavioral22
Sample
miner.exe
Resource
win10v20201028
General
-
Target
mine_btg.bat
-
Size
131B
-
MD5
9fd0452636f791144e62add94601834e
-
SHA1
21abeb78dbcb9491c8e92a387834cc3917d1912f
-
SHA256
faa338330b521339f9d725b74e610d53b922fc033deb6e486efbbc92a9871404
-
SHA512
1e582f3ce2cf8a72c33b81fb9d4065e21f4763a1e2f3758e8c409c2ee32d11860c6190bf4300b40243f42de04d585a35bd97e4c59c51407c81809092203049fa
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
cmd.exedescription pid process target process PID 4776 wrote to memory of 5100 4776 cmd.exe miner.exe PID 4776 wrote to memory of 5100 4776 cmd.exe miner.exe PID 4776 wrote to memory of 5100 4776 cmd.exe miner.exe
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\mine_btg.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\miner.exeminer.exe --algo 144_5 --pers BgoldPoW --server eu.btgpool.pro --port 1445 --user GZdx44gPVFX7GfeWXA3kyiuXecym3CWGHi.rig0 --pass x2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/5100-2-0x0000000000000000-mapping.dmp