General
-
Target
d2315e76e70b2b4f0e16732a3715d67ba328459bc34eebe952b465858c854b2a
-
Size
11.0MB
-
Sample
220516-q6atpaffaj
-
MD5
3d5af007f98f29f0d44815345e9a7838
-
SHA1
b4a9f431a0c6d35193569d0f72f1b7127726e9af
-
SHA256
d2315e76e70b2b4f0e16732a3715d67ba328459bc34eebe952b465858c854b2a
-
SHA512
1413aa1ba16d018484fc41704a8d1558318de4b8eea1fe6002b83555a23da7684ea2fb2ebe72a692c434276264308c8e116a733b5b3fb4a48d16ebb42aa22c09
Behavioral task
behavioral1
Sample
d2315e76e70b2b4f0e16732a3715d67ba328459bc34eebe952b465858c854b2a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
d2315e76e70b2b4f0e16732a3715d67ba328459bc34eebe952b465858c854b2a.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
d2315e76e70b2b4f0e16732a3715d67ba328459bc34eebe952b465858c854b2a
-
Size
11.0MB
-
MD5
3d5af007f98f29f0d44815345e9a7838
-
SHA1
b4a9f431a0c6d35193569d0f72f1b7127726e9af
-
SHA256
d2315e76e70b2b4f0e16732a3715d67ba328459bc34eebe952b465858c854b2a
-
SHA512
1413aa1ba16d018484fc41704a8d1558318de4b8eea1fe6002b83555a23da7684ea2fb2ebe72a692c434276264308c8e116a733b5b3fb4a48d16ebb42aa22c09
Score10/10-
XMRig Miner Payload
-
Executes dropped EXE
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-