5750a4e7e392665b01ccfdd4af273ccbe096b14516c7a3e0f2fbb068ad25e482
General
Target
Size
Sample
5750a4e7e392665b01ccfdd4af273ccbe096b14516c7a3e0f2fbb068ad25e482
19MB
220521-azsg6abag5
Score
10 /10
MD5
SHA1
SHA256
SHA512
19263218df8fc863e249a5300abd8856
0775d23e9c3aca70961fe1498735c650f441c5df
5750a4e7e392665b01ccfdd4af273ccbe096b14516c7a3e0f2fbb068ad25e482
cc793a66cf206bf8e48a55e0c84dfc361d44896b5a69534d27b9376bd7d7be59067a667e5077fbea48f40c7841994c57e1bcdfabe14c42d4a59271a9ea4b44a9
Malware Config
Targets
Target
MD5
Filesize
5750a4e7e392665b01ccfdd4af273ccbe096b14516c7a3e0f2fbb068ad25e482
19263218df8fc863e249a5300abd8856
19MB
Score
10/10
SHA1
SHA256
SHA512
0775d23e9c3aca70961fe1498735c650f441c5df
5750a4e7e392665b01ccfdd4af273ccbe096b14516c7a3e0f2fbb068ad25e482
cc793a66cf206bf8e48a55e0c84dfc361d44896b5a69534d27b9376bd7d7be59067a667e5077fbea48f40c7841994c57e1bcdfabe14c42d4a59271a9ea4b44a9
Tags
Signatures
-
Modifies visibility of file extensions in Explorer
-
xmrig
Description
XMRig is a high performance, open source, cross platform CPU/GPU miner.
Tags
-
XMRig Miner Payload
Tags
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks computer location settings
Description
Looks up country code configured in the registry, likely geofence.
TTPs
-
Loads dropped DLL
-
Adds Run key to start application
Tags
TTPs
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks