General
- Target SecuriteInfo.com.MSIL.CoinMiner.BQC.20827.12692
- Size 95KB
- Sample220114-msbbhsgaak
- SHA256 d98ec5a120292e4e1526ec0670ba57f93f3a577d93ea244412e66bf5f1e9cde7
- MD5 ebb6a56a82a483989fa3974212e4e2c5
- SHA1 9e6c8601876259226d38039507c6d086ee2a6b2a
- SHA512 3ace68dc749b2595fa110f2c2f74c89a3cb56815b60c8e2dbbd57b0fbe2e76d0720ed7d5448400a94ae2717666054c027e186730a8d94b8ff28bf07658e4985a
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.MSIL.CoinMiner.BQC.20827.12692.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.MSIL.CoinMiner.BQC.20827.12692
- Size 95KB
- SHA256 d98ec5a120292e4e1526ec0670ba57f93f3a577d93ea244412e66bf5f1e9cde7
- MD5 ebb6a56a82a483989fa3974212e4e2c5
- SHA1 9e6c8601876259226d38039507c6d086ee2a6b2a
- SHA512 3ace68dc749b2595fa110f2c2f74c89a3cb56815b60c8e2dbbd57b0fbe2e76d0720ed7d5448400a94ae2717666054c027e186730a8d94b8ff28bf07658e4985a
- MD5 SHA1 SHA512
-
XMRig Miner Payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.