General

  • Target

    92b81afb69efbe857c74d07e464b4097.exe

  • Size

    112KB

  • Sample

    210329-f779bljb52

  • MD5

    92b81afb69efbe857c74d07e464b4097

  • SHA1

    7d3e80fd056e5ff2ed522220af3980f80572ad4f

  • SHA256

    3f201f2578b5c9ce1a2d0deb31f79409b8da7e4c4c993e047f9c683b27783d25

  • SHA512

    05efa0aa40a969e4f114a063731d8d96de5531b9e2bf8af57d888c9d2a6f2b80515dc87ccbc1f12cc8e50b202a6058564e6cb829b7452165d57a863bcb77b5a4

Malware Config

Targets

    • Target

      92b81afb69efbe857c74d07e464b4097.exe

    • Size

      112KB

    • MD5

      92b81afb69efbe857c74d07e464b4097

    • SHA1

      7d3e80fd056e5ff2ed522220af3980f80572ad4f

    • SHA256

      3f201f2578b5c9ce1a2d0deb31f79409b8da7e4c4c993e047f9c683b27783d25

    • SHA512

      05efa0aa40a969e4f114a063731d8d96de5531b9e2bf8af57d888c9d2a6f2b80515dc87ccbc1f12cc8e50b202a6058564e6cb829b7452165d57a863bcb77b5a4

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Remote System Discovery

1
T1018

Tasks