General
-
Target
5bdb6537aeb8f84e02475e8c55ef2bc1749bd89537e53339e30bd548d68e0479
-
Size
13.9MB
-
Sample
210504-t7f4jhty4x
-
MD5
ec2c59967ea1ba9fdbeaa79e41ee0c94
-
SHA1
9ff11413e265839c6994d473146ae5cf1c3cf256
-
SHA256
5bdb6537aeb8f84e02475e8c55ef2bc1749bd89537e53339e30bd548d68e0479
-
SHA512
3bf9d5e84d71f3f00425dd4a47e3a1838866d2d887490484610322a562849120d90e173051de6fbe0f8c72062232a42038ded2d28922cb804c654a00c5fbbe94
Behavioral task
behavioral1
Sample
5bdb6537aeb8f84e02475e8c55ef2bc1749bd89537e53339e30bd548d68e0479.exe
Resource
win7v20210408
Malware Config
Targets
-
-
Target
5bdb6537aeb8f84e02475e8c55ef2bc1749bd89537e53339e30bd548d68e0479
-
Size
13.9MB
-
MD5
ec2c59967ea1ba9fdbeaa79e41ee0c94
-
SHA1
9ff11413e265839c6994d473146ae5cf1c3cf256
-
SHA256
5bdb6537aeb8f84e02475e8c55ef2bc1749bd89537e53339e30bd548d68e0479
-
SHA512
3bf9d5e84d71f3f00425dd4a47e3a1838866d2d887490484610322a562849120d90e173051de6fbe0f8c72062232a42038ded2d28922cb804c654a00c5fbbe94
-
XMRig Miner Payload
-
Executes dropped EXE
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Drops file in System32 directory
-