Overview

overview

10

Static

static

a2035a826d...b0.exe

windows7_x64

10

a2035a826d...b0.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2035a826d94a0d9e63cb90f80acffd03caff3db6b73bf4e03fa84eddd8806b0

  • Size

    2.3MB

  • Sample

    220128-xyq92abcfm

  • MD5

    1b924ee1c9630f3e580d99a0c7568f7a

  • SHA1

    704849500748b97e63cf820f3b768ec4f91336d8

  • SHA256

    a2035a826d94a0d9e63cb90f80acffd03caff3db6b73bf4e03fa84eddd8806b0

  • SHA512

    6c4cf6499dbdf8ca6a7815365e0a7ab687f2fcfd52cd4aab968487a7f85e01fbea51087db2710990e74671a5caf1682b05f19b367eda093433775dd72fef4da7

Score
10/10
strongpityxmrigminerspywarestealer

Malware Config

Targets

    • Target

      a2035a826d94a0d9e63cb90f80acffd03caff3db6b73bf4e03fa84eddd8806b0

    • Size

      2.3MB

    • MD5

      1b924ee1c9630f3e580d99a0c7568f7a

    • SHA1

      704849500748b97e63cf820f3b768ec4f91336d8

    • SHA256

      a2035a826d94a0d9e63cb90f80acffd03caff3db6b73bf4e03fa84eddd8806b0

    • SHA512

      6c4cf6499dbdf8ca6a7815365e0a7ab687f2fcfd52cd4aab968487a7f85e01fbea51087db2710990e74671a5caf1682b05f19b367eda093433775dd72fef4da7

    Score
    10/10
    strongpityxmrigminerspywarestealer

    • StrongPity

      StrongPity is a spyware developed by PROMETHIUM APT group mainly used in government sponsored attacks.

      stealerspywarestrongpity

    • StrongPity Spyware

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks