General

  • Target

    e0fbfdd5bb5d283ddbb8693da51c7caf2edc24a7da80478b15489ceb36724739

  • Size

    1.3MB

  • Sample

    220520-xaa8xafben

  • MD5

    e51d77c98e92a06556b09b1bebfbc34a

  • SHA1

    80cb84605a3e861708ee955923f87f69b8d9aaaf

  • SHA256

    e0fbfdd5bb5d283ddbb8693da51c7caf2edc24a7da80478b15489ceb36724739

  • SHA512

    a03c67719fa39a2c06e9b33f8ba99461a02626ec436f2de541c2a5ea9d206cffb642de2d1409597d27d5f8975884f773c40e7137034f5ab2fc12eb9342fc62a2

Score
10/10

Malware Config

Targets

    • Target

      e0fbfdd5bb5d283ddbb8693da51c7caf2edc24a7da80478b15489ceb36724739

    • Size

      1.3MB

    • MD5

      e51d77c98e92a06556b09b1bebfbc34a

    • SHA1

      80cb84605a3e861708ee955923f87f69b8d9aaaf

    • SHA256

      e0fbfdd5bb5d283ddbb8693da51c7caf2edc24a7da80478b15489ceb36724739

    • SHA512

      a03c67719fa39a2c06e9b33f8ba99461a02626ec436f2de541c2a5ea9d206cffb642de2d1409597d27d5f8975884f773c40e7137034f5ab2fc12eb9342fc62a2

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner Payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops startup file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks