Overview

overview

10

Static

static

0de13f1d74...b3.exe

windows7_x64

10

0de13f1d74...b3.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0de13f1d74dda01de51794c0b559eb528c972e6dcb18fe873207275940cc16b3

  • Size

    8.3MB

  • Sample

    220128-2c8z6sfbfn

  • MD5

    0d7c16ad2aaf62172aead5455f93e38c

  • SHA1

    9836b713ec9f984815c2a8dfe2d0213234a27700

  • SHA256

    0de13f1d74dda01de51794c0b559eb528c972e6dcb18fe873207275940cc16b3

  • SHA512

    5540bd21915e7d5b4eb1bacfbd91c4e30eb1ea83f1e811943779e166c88f74917c01c605224fae949c3c9358cd038a0de810bd4f6eccc0c44b0536731fb2e390

Score
10/10
strongpityxmrigminerspywarestealer

Malware Config

Targets

    • Target

      0de13f1d74dda01de51794c0b559eb528c972e6dcb18fe873207275940cc16b3

    • Size

      8.3MB

    • MD5

      0d7c16ad2aaf62172aead5455f93e38c

    • SHA1

      9836b713ec9f984815c2a8dfe2d0213234a27700

    • SHA256

      0de13f1d74dda01de51794c0b559eb528c972e6dcb18fe873207275940cc16b3

    • SHA512

      5540bd21915e7d5b4eb1bacfbd91c4e30eb1ea83f1e811943779e166c88f74917c01c605224fae949c3c9358cd038a0de810bd4f6eccc0c44b0536731fb2e390

    Score
    10/10
    strongpityxmrigminerspywarestealer

    • StrongPity

      StrongPity is a spyware developed by PROMETHIUM APT group mainly used in government sponsored attacks.

      stealerspywarestrongpity

    • StrongPity Spyware

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks