Overview

overview

9

Static

static

017f3b6b99...b2.exe

windows7_x64

9

017f3b6b99...b2.exe

windows10-2004_x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    017f3b6b997845fd6122cd70e1138f5ea680ad49c8ddaab0dff95f0157d9d7b2

  • Size

    601KB

  • Sample

    220523-x5zjzsgbfl

  • MD5

    7f6bae4bb759bfc5d996d4aaf32bacf3

  • SHA1

    ea18cc9f6041534b49fb1ad801466571404dfdd9

  • SHA256

    017f3b6b997845fd6122cd70e1138f5ea680ad49c8ddaab0dff95f0157d9d7b2

  • SHA512

    55fd97a79ab542df0422be34726614a49d2eb19c22c6ca4ecdf1dced35949369012840bd6279c06f9ff39dfe0b2069ed206c58d855a35e9eeedef419eca985ef

Score
9/10
miner

Malware Config

Targets

    • Target

      017f3b6b997845fd6122cd70e1138f5ea680ad49c8ddaab0dff95f0157d9d7b2

    • Size

      601KB

    • MD5

      7f6bae4bb759bfc5d996d4aaf32bacf3

    • SHA1

      ea18cc9f6041534b49fb1ad801466571404dfdd9

    • SHA256

      017f3b6b997845fd6122cd70e1138f5ea680ad49c8ddaab0dff95f0157d9d7b2

    • SHA512

      55fd97a79ab542df0422be34726614a49d2eb19c22c6ca4ecdf1dced35949369012840bd6279c06f9ff39dfe0b2069ed206c58d855a35e9eeedef419eca985ef

    Score
    9/10
    miner

    • Detected Stratum cryptominer command

      Looks to be attempting to contact Stratum mining pool.

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks