General

  • Target

    SecuriteInfo.com.Trojan.Siggen15.58403.20850.14287

  • Size

    5.4MB

  • Sample

    211206-drccragae8

  • MD5

    5748009f0073ba952cbb581c44530798

  • SHA1

    3304676ed8a238bf792a0fa359708861b3bfd42a

  • SHA256

    4535de41278b2d4487e8f51de5851d8623de81e68060fe42d9ecb2cc23c4ed06

  • SHA512

    03b13118184ea701e9257e2e9cc9698dffadfcd42276a3771477c95ff6e4351500ce85563444ccc98f948ae91c1ed6f6969ad33437105016c74a7e96adf0febf

Score
10/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.Siggen15.58403.20850.14287

    • Size

      5.4MB

    • MD5

      5748009f0073ba952cbb581c44530798

    • SHA1

      3304676ed8a238bf792a0fa359708861b3bfd42a

    • SHA256

      4535de41278b2d4487e8f51de5851d8623de81e68060fe42d9ecb2cc23c4ed06

    • SHA512

      03b13118184ea701e9257e2e9cc9698dffadfcd42276a3771477c95ff6e4351500ce85563444ccc98f948ae91c1ed6f6969ad33437105016c74a7e96adf0febf

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner Payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Discovery

System Information Discovery

1
T1082

Tasks