General
-
Target
e7da6462626294ecd569f49620e0c4974629b2804d83a008548f26bbff421f69
-
Size
25.9MB
-
Sample
220516-q54elsfehn
-
MD5
af786eabc7cd4d460d6278ed2d1ea5bf
-
SHA1
96cf1eabe3e77f436ae8500f73e2e66cd0c8ff8e
-
SHA256
e7da6462626294ecd569f49620e0c4974629b2804d83a008548f26bbff421f69
-
SHA512
00c190550f50ed651733c4996b7877a8b4446473c98003c31e164028e06a728dcc9e97f3315550a61f30b888db5b20537ec0d890f4d13d9e266ee7fe94e457b6
Behavioral task
behavioral1
Sample
e7da6462626294ecd569f49620e0c4974629b2804d83a008548f26bbff421f69.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
e7da6462626294ecd569f49620e0c4974629b2804d83a008548f26bbff421f69.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
e7da6462626294ecd569f49620e0c4974629b2804d83a008548f26bbff421f69
-
Size
25.9MB
-
MD5
af786eabc7cd4d460d6278ed2d1ea5bf
-
SHA1
96cf1eabe3e77f436ae8500f73e2e66cd0c8ff8e
-
SHA256
e7da6462626294ecd569f49620e0c4974629b2804d83a008548f26bbff421f69
-
SHA512
00c190550f50ed651733c4996b7877a8b4446473c98003c31e164028e06a728dcc9e97f3315550a61f30b888db5b20537ec0d890f4d13d9e266ee7fe94e457b6
Score10/10-
XMRig Miner Payload
-
Executes dropped EXE
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-