Overview
overview
10Static
static
mine_aeternity.bat
windows7_x64
1mine_aeternity.bat
windows10_x64
1mine_aion.bat
windows7_x64
1mine_aion.bat
windows10_x64
1mine_beam.bat
windows7_x64
1mine_beam.bat
windows10_x64
1mine_btcz.bat
windows7_x64
1mine_btcz.bat
windows10_x64
1mine_btg.bat
windows7_x64
1mine_btg.bat
windows10_x64
1mine_grin29.bat
windows7_x64
1mine_grin29.bat
windows10_x64
1mine_grin31.bat
windows7_x64
1mine_grin31.bat
windows10_x64
1mine_mnx.bat
windows7_x64
1mine_mnx.bat
windows10_x64
1mine_swap.bat
windows7_x64
1mine_swap.bat
windows10_x64
1mine_zero.bat
windows7_x64
1mine_zero.bat
windows10_x64
1miner.exe
windows7_x64
10miner.exe
windows10_x64
10Analysis
-
max time kernel
29s -
max time network
70s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
18-01-2021 15:47
Static task
static1
Behavioral task
behavioral1
Sample
mine_aeternity.bat
Resource
win7v20201028
Behavioral task
behavioral2
Sample
mine_aeternity.bat
Resource
win10v20201028
Behavioral task
behavioral3
Sample
mine_aion.bat
Resource
win7v20201028
Behavioral task
behavioral4
Sample
mine_aion.bat
Resource
win10v20201028
Behavioral task
behavioral5
Sample
mine_beam.bat
Resource
win7v20201028
Behavioral task
behavioral6
Sample
mine_beam.bat
Resource
win10v20201028
Behavioral task
behavioral7
Sample
mine_btcz.bat
Resource
win7v20201028
Behavioral task
behavioral8
Sample
mine_btcz.bat
Resource
win10v20201028
Behavioral task
behavioral9
Sample
mine_btg.bat
Resource
win7v20201028
Behavioral task
behavioral10
Sample
mine_btg.bat
Resource
win10v20201028
Behavioral task
behavioral11
Sample
mine_grin29.bat
Resource
win7v20201028
Behavioral task
behavioral12
Sample
mine_grin29.bat
Resource
win10v20201028
Behavioral task
behavioral13
Sample
mine_grin31.bat
Resource
win7v20201028
Behavioral task
behavioral14
Sample
mine_grin31.bat
Resource
win10v20201028
Behavioral task
behavioral15
Sample
mine_mnx.bat
Resource
win7v20201028
Behavioral task
behavioral16
Sample
mine_mnx.bat
Resource
win10v20201028
Behavioral task
behavioral17
Sample
mine_swap.bat
Resource
win7v20201028
Behavioral task
behavioral18
Sample
mine_swap.bat
Resource
win10v20201028
Behavioral task
behavioral19
Sample
mine_zero.bat
Resource
win7v20201028
Behavioral task
behavioral20
Sample
mine_zero.bat
Resource
win10v20201028
Behavioral task
behavioral21
Sample
miner.exe
Resource
win7v20201028
Behavioral task
behavioral22
Sample
miner.exe
Resource
win10v20201028
General
-
Target
mine_aion.bat
-
Size
162B
-
MD5
648e1bd01b6ab048551285bd24f150c4
-
SHA1
6902ea2f7b556a5772a9ed6a65b5909da8fb3a9e
-
SHA256
c25af55cbb502e1c80dcb5c89ed26d248c2b10d0617e95ff4f5066b57feb2aae
-
SHA512
fdab90a02f6a636d5da5bf56ded63ef6c899a231569957e0a5abaf9b7d73d997a44c167ca6a9ec955615cb41e0c2746581e63393d80ec269aca8d6b17a0e69b7
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
cmd.exedescription pid process target process PID 1052 wrote to memory of 2372 1052 cmd.exe miner.exe PID 1052 wrote to memory of 2372 1052 cmd.exe miner.exe PID 1052 wrote to memory of 2372 1052 cmd.exe miner.exe
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\mine_aion.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\miner.exeminer.exe --algo 210_9 --pers AION0PoW --server aion-eu.luxor.tech --port 3366 --user 0xa07978089c76e2010720bec8400f05530cd946a567dc0fd9b862d83a45681f7c --pass x2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2372-2-0x0000000000000000-mapping.dmp