General
-
Target
4608b0d202b009695de597478de584d928bf0ff6983316e7c70630e92d2fddb0
-
Size
21.9MB
-
Sample
220516-q7a6vafhbp
-
MD5
55811928cde1a7a2de7f812e526192fc
-
SHA1
4db8c7fd0f39aaefdb37faabc65d8afc16c53a1b
-
SHA256
4608b0d202b009695de597478de584d928bf0ff6983316e7c70630e92d2fddb0
-
SHA512
a36eaa893ff1033eb126b37c3cd05fd60c7d7d6eac85b07bb582447842da91571cd670185350336032fe9cc902128a1584ea46c2917c2830a098dbd969dcade5
Behavioral task
behavioral1
Sample
4608b0d202b009695de597478de584d928bf0ff6983316e7c70630e92d2fddb0.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4608b0d202b009695de597478de584d928bf0ff6983316e7c70630e92d2fddb0.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
4608b0d202b009695de597478de584d928bf0ff6983316e7c70630e92d2fddb0
-
Size
21.9MB
-
MD5
55811928cde1a7a2de7f812e526192fc
-
SHA1
4db8c7fd0f39aaefdb37faabc65d8afc16c53a1b
-
SHA256
4608b0d202b009695de597478de584d928bf0ff6983316e7c70630e92d2fddb0
-
SHA512
a36eaa893ff1033eb126b37c3cd05fd60c7d7d6eac85b07bb582447842da91571cd670185350336032fe9cc902128a1584ea46c2917c2830a098dbd969dcade5
-
XMRig Miner Payload
-
Executes dropped EXE
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-