4b61679662313916b18999fbe63ea2d0163d2b3e6aad16e09aea27cbb97dac9e

General
Target

4b61679662313916b18999fbe63ea2d0163d2b3e6aad16e09aea27cbb97dac9e

Size

2MB

Sample

220520-w9evpscbc9

Score
10 /10
MD5

087d6c8306538655e99a7cbc734152e6

SHA1

3f4499b01e23549ce5c2992ffaf098de9ed4cbc6

SHA256

4b61679662313916b18999fbe63ea2d0163d2b3e6aad16e09aea27cbb97dac9e

SHA512

60b8822d1cff7fb8b82484a50fb195148d9f0d11c5d5d14a9f01c5622a324ec433828087c32416037b0567d68527364d6795bb302575d6b5e739e027ea400b40

Malware Config
Targets
Target

4b61679662313916b18999fbe63ea2d0163d2b3e6aad16e09aea27cbb97dac9e

MD5

087d6c8306538655e99a7cbc734152e6

Filesize

2MB

Score
10/10
SHA1

3f4499b01e23549ce5c2992ffaf098de9ed4cbc6

SHA256

4b61679662313916b18999fbe63ea2d0163d2b3e6aad16e09aea27cbb97dac9e

SHA512

60b8822d1cff7fb8b82484a50fb195148d9f0d11c5d5d14a9f01c5622a324ec433828087c32416037b0567d68527364d6795bb302575d6b5e739e027ea400b40

Tags

Signatures

  • xmrig

    Description

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    Tags

  • Detected Stratum cryptominer command

    Description

    Looks to be attempting to contact Stratum mining pool.

    Tags

  • XMRig Miner Payload

    Tags

  • Executes dropped EXE

  • Stops running service(s)

    Tags

    TTPs

    Modify Existing ServiceService Stop
  • UPX packed file

    Description

    Detects executables packed with UPX/modified UPX open source packer.

    Tags

  • Checks computer location settings

    Description

    Looks up country code configured in the registry, likely geofence.

    TTPs

    Query RegistrySystem Information Discovery
  • Deletes itself

  • Loads dropped DLL

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Execution
          Exfiltration
            Impact
            Initial Access
              Lateral Movement
                Privilege Escalation
                  Tasks

                  static1

                  8/10

                  behavioral1

                  8/10

                  behavioral2

                  10/10