General
Static task
static1
URLScan task
urlscan1
Sample
http://legitable-investments.online/build.exe
Malware Config
Targets
-
-
XMRig Miner Payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.