General
-
Target
4ef54d3546c3e85848a314144eafdca38fdd83bd53bdd308575de1cd6585d1bc
-
Size
29.3MB
-
Sample
220516-q66lcsdbg9
-
MD5
29f2806cdce05bcb54e460705bd9c75c
-
SHA1
ad3443b65a4bbaf1f8c6e1adf60a2546b43ffa1c
-
SHA256
4ef54d3546c3e85848a314144eafdca38fdd83bd53bdd308575de1cd6585d1bc
-
SHA512
afe167133707368e0a35946f89dcc3cd45074d377c8930601eecfd917cea9033d0a3efea42216ecfb99ca4b0713467855aa3a9be90bf2fd16284bc307025e93d
Behavioral task
behavioral1
Sample
4ef54d3546c3e85848a314144eafdca38fdd83bd53bdd308575de1cd6585d1bc.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4ef54d3546c3e85848a314144eafdca38fdd83bd53bdd308575de1cd6585d1bc.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
4ef54d3546c3e85848a314144eafdca38fdd83bd53bdd308575de1cd6585d1bc
-
Size
29.3MB
-
MD5
29f2806cdce05bcb54e460705bd9c75c
-
SHA1
ad3443b65a4bbaf1f8c6e1adf60a2546b43ffa1c
-
SHA256
4ef54d3546c3e85848a314144eafdca38fdd83bd53bdd308575de1cd6585d1bc
-
SHA512
afe167133707368e0a35946f89dcc3cd45074d377c8930601eecfd917cea9033d0a3efea42216ecfb99ca4b0713467855aa3a9be90bf2fd16284bc307025e93d
-
XMRig Miner Payload
-
Executes dropped EXE
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Drops file in System32 directory
-