Overview

overview

10

Static

static

1d11459a92...8f.exe

windows7_x64

7

1d11459a92...8f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d11459a92daf9fb1a1031bc6b5e5b6286496067dff4d917b9342488a02c008f

  • Size

    828KB

  • Sample

    210513-25pwzn64ye

  • MD5

    d3204ce088c60d36b2fe1a26483cfd70

  • SHA1

    bc19d859fbfe1e0026de444dcb5db63d1647273f

  • SHA256

    1d11459a92daf9fb1a1031bc6b5e5b6286496067dff4d917b9342488a02c008f

  • SHA512

    8d4d8a6ee61aee7dcb39306c395e02635c4176513f94f63d048843c299c7f7d2c9a90d8740d9f685771adc17930a114c8445cef379e9dceecf89a0856c41c423

Score
10/10
xmrigminerspywarestealer

Malware Config

Targets

    • Target

      1d11459a92daf9fb1a1031bc6b5e5b6286496067dff4d917b9342488a02c008f

    • Size

      828KB

    • MD5

      d3204ce088c60d36b2fe1a26483cfd70

    • SHA1

      bc19d859fbfe1e0026de444dcb5db63d1647273f

    • SHA256

      1d11459a92daf9fb1a1031bc6b5e5b6286496067dff4d917b9342488a02c008f

    • SHA512

      8d4d8a6ee61aee7dcb39306c395e02635c4176513f94f63d048843c299c7f7d2c9a90d8740d9f685771adc17930a114c8445cef379e9dceecf89a0856c41c423

    Score
    10/10
    spywarestealerxmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks