General

  • Target

    5ebf11052803eab2accd50cce6d78fe40fb23a3cfa39ee29b09f8e8872577717

  • Size

    904KB

  • Sample

    220731-x258cseafl

  • MD5

    903bd7b89548605115d214e7ee2f877f

  • SHA1

    831c4b9ebb534983d1fc94fd740f053c69f0d29d

  • SHA256

    5ebf11052803eab2accd50cce6d78fe40fb23a3cfa39ee29b09f8e8872577717

  • SHA512

    55fc3a8081d972cc46aecaeb5e615bb219e327feee9b934cbbc1a9e5dbb1c074a48f1368e9971531652c559950e774e39b037a75bde971c90d8f269c41e2ccbc

Score
10/10

Malware Config

Targets

    • Target

      5ebf11052803eab2accd50cce6d78fe40fb23a3cfa39ee29b09f8e8872577717

    • Size

      904KB

    • MD5

      903bd7b89548605115d214e7ee2f877f

    • SHA1

      831c4b9ebb534983d1fc94fd740f053c69f0d29d

    • SHA256

      5ebf11052803eab2accd50cce6d78fe40fb23a3cfa39ee29b09f8e8872577717

    • SHA512

      55fc3a8081d972cc46aecaeb5e615bb219e327feee9b934cbbc1a9e5dbb1c074a48f1368e9971531652c559950e774e39b037a75bde971c90d8f269c41e2ccbc

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops startup file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks