d1238dcc889df13c51a8d02952c30ba4370ebe4a0b8ce173a83ca267d8f945d2

General
Target

d1238dcc889df13c51a8d02952c30ba4370ebe4a0b8ce173a83ca267d8f945d2

Size

12MB

Sample

220520-qnd4dsgfep

Score
10 /10
MD5

514099bb5934695dce6048da4376d690

SHA1

df84049a83a502ad0db2fb118c89d1878a615b4a

SHA256

d1238dcc889df13c51a8d02952c30ba4370ebe4a0b8ce173a83ca267d8f945d2

SHA512

ac050605d8ba41d0c5b1f9711ad4be5ba69b116f7a76e1bba27c96139242197bef592ea14eca034a4047a4d2b211a632b328774e0235576c9ecf4a849b34209b

Malware Config
Targets
Target

d1238dcc889df13c51a8d02952c30ba4370ebe4a0b8ce173a83ca267d8f945d2

MD5

514099bb5934695dce6048da4376d690

Filesize

12MB

Score
10/10
SHA1

df84049a83a502ad0db2fb118c89d1878a615b4a

SHA256

d1238dcc889df13c51a8d02952c30ba4370ebe4a0b8ce173a83ca267d8f945d2

SHA512

ac050605d8ba41d0c5b1f9711ad4be5ba69b116f7a76e1bba27c96139242197bef592ea14eca034a4047a4d2b211a632b328774e0235576c9ecf4a849b34209b

Tags

Signatures

  • xmrig

    Description

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    Tags

  • XMRig Miner Payload

    Tags

  • Adds policy Run key to start application

    Tags

    TTPs

    Registry Run Keys / Startup FolderModify Registry
  • Executes dropped EXE

  • Cryptocurrency Miner

    Description

    Makes network request to known mining pool URL.

    Tags

  • Deletes itself

  • Drops startup file

  • Loads dropped DLL

  • Modifies file permissions

    Tags

    TTPs

    File Permissions Modification
  • Adds Run key to start application

    Tags

    TTPs

    Registry Run Keys / Startup FolderModify Registry
  • AutoIT Executable

    Description

    AutoIT scripts compiled to PE executables.

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Privilege Escalation
                    Tasks

                    static1

                    5/10

                    behavioral1

                    10/10

                    behavioral2

                    10/10