Overview

overview

10

Static

static

d59962806f...da.exe

windows7_x64

10

d59962806f...da.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d59962806fcf8c3ed228654da0b964da

  • Size

    17KB

  • Sample

    210905-tshh6acghm

  • MD5

    d59962806fcf8c3ed228654da0b964da

  • SHA1

    0373488126b5f13c8fd60ee37b81624568490db0

  • SHA256

    f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b

  • SHA512

    f960494711f5230f86c9f76a2c43549eb64694a0f5a3dca5a3bee1ff55b78b854119bfd65d2676582edc36e80b84cdc0484f399c5eff98462e07caa8de164a88

Score
10/10
buerxmrigloaderminer

Malware Config

Targets

    • Target

      d59962806fcf8c3ed228654da0b964da

    • Size

      17KB

    • MD5

      d59962806fcf8c3ed228654da0b964da

    • SHA1

      0373488126b5f13c8fd60ee37b81624568490db0

    • SHA256

      f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b

    • SHA512

      f960494711f5230f86c9f76a2c43549eb64694a0f5a3dca5a3bee1ff55b78b854119bfd65d2676582edc36e80b84cdc0484f399c5eff98462e07caa8de164a88

    Score
    10/10
    buerloaderxmrigminer

    • Buer

      Buer is a new modular loader first seen in August 2019.

      loaderbuer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner Payload

      miner

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks