General
-
Target
6ec0744d20056736672dd8897ec222a5868d4b2a64867460a2e6e991d6b3f33a
-
Size
25.0MB
-
Sample
220516-q6tlssffgl
-
MD5
85e0a2d8d5073b57392da82ea63349b9
-
SHA1
b7312ca8253d683749a5af459effc0e3e873d635
-
SHA256
6ec0744d20056736672dd8897ec222a5868d4b2a64867460a2e6e991d6b3f33a
-
SHA512
834f49b799f9577a1a1daa22f396643f3877e5d47790c44676e7b51c33538b7bf31f31a26d627ebb06dc5ad694e7bc74abfcdb5dcffa7cc1aeb1f2252d60961b
Behavioral task
behavioral1
Sample
6ec0744d20056736672dd8897ec222a5868d4b2a64867460a2e6e991d6b3f33a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
6ec0744d20056736672dd8897ec222a5868d4b2a64867460a2e6e991d6b3f33a.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
6ec0744d20056736672dd8897ec222a5868d4b2a64867460a2e6e991d6b3f33a
-
Size
25.0MB
-
MD5
85e0a2d8d5073b57392da82ea63349b9
-
SHA1
b7312ca8253d683749a5af459effc0e3e873d635
-
SHA256
6ec0744d20056736672dd8897ec222a5868d4b2a64867460a2e6e991d6b3f33a
-
SHA512
834f49b799f9577a1a1daa22f396643f3877e5d47790c44676e7b51c33538b7bf31f31a26d627ebb06dc5ad694e7bc74abfcdb5dcffa7cc1aeb1f2252d60961b
Score10/10-
XMRig Miner Payload
-
Executes dropped EXE
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-