General

  • Target

    6920bceda086abc5ab841f230283f906189485a3bc75bad0439dd53cb411b0e0

  • Size

    1.9MB

  • Sample

    211022-wxpt5schap

  • MD5

    cb512ea76616a37bc817a4868dbb3ebf

  • SHA1

    ad6019e203f53a3a04dcb098f35081e3b139f575

  • SHA256

    6920bceda086abc5ab841f230283f906189485a3bc75bad0439dd53cb411b0e0

  • SHA512

    e4dbd3c1d4c584e63bc9014386b047dea362dfe0de9aee14f6e50d5f65f34ee2f77f6d1e79fa1f48f583f34e37c5a70e2ce375317e27cf3c662544c0085e6660

Score
10/10

Malware Config

Targets

    • Target

      6920bceda086abc5ab841f230283f906189485a3bc75bad0439dd53cb411b0e0

    • Size

      1.9MB

    • MD5

      cb512ea76616a37bc817a4868dbb3ebf

    • SHA1

      ad6019e203f53a3a04dcb098f35081e3b139f575

    • SHA256

      6920bceda086abc5ab841f230283f906189485a3bc75bad0439dd53cb411b0e0

    • SHA512

      e4dbd3c1d4c584e63bc9014386b047dea362dfe0de9aee14f6e50d5f65f34ee2f77f6d1e79fa1f48f583f34e37c5a70e2ce375317e27cf3c662544c0085e6660

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks