Overview

overview

10

Static

static

1

VTDLacbfc6...er.exe

windows7_x64

10

VTDLacbfc6...er.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acbfc6eec0790f36450e3221eba3a764de96cd6a98851bdbc56ab10b70a48fb1.zip

  • Size

    13.9MB

  • Sample

    210715-d3xr3wvv4n

  • MD5

    60439a005430d98b96730f2503e439a9

  • SHA1

    35ba4d1af7380ae6a11989fa833a9dfa26f0cdad

  • SHA256

    dd3bcc6ac9e17e42417e866d0ff4c6d74e89c423fd95a1c062b9289e02b92e10

  • SHA512

    6f746c6cd8872e599cb30b60a9b9cb78d7a88bbdfbd10f1315e06c05c15bcace145fcedfd763e779158f0371cef769e93480710e4a8eb92954394f5871e566e4

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      VTDLacbfc6eec0790f36450e3221eba3a764de96cd6a98851bdbc56ab10b70a48fb1.danger.exe

    • Size

      13.9MB

    • MD5

      333c55009357366a4d3bb33cfde19169

    • SHA1

      6d72e6083f8c569f530de4acb2c8f6012c51c634

    • SHA256

      acbfc6eec0790f36450e3221eba3a764de96cd6a98851bdbc56ab10b70a48fb1

    • SHA512

      fcd5bfdd4e865a42f68280fb6bcbc431b602de4633cb645f95b1e9a2b9697239249a9ce7f7aa5e401c829f8f7b8e64ec2e9789166ca503aa6a659490918f849d

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Detected Stratum cryptominer command

      Looks to be attempting to contact Stratum mining pool.

      miner

    • XMRig Miner Payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    • autoit_exe

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Hidden Files and Directories

1
T1158

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Hidden Files and Directories

1
T1158

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks