General
-
Target
UNNAMED3.exe
-
Size
9.1MB
-
Sample
220926-xh6psabgc8
-
MD5
223ce6bb95cc6072b3c08cdcdf6b2944
-
SHA1
a55afd57e0862347574680bda2ea42ccb6c31bce
-
SHA256
39cc2423c2cd157014637802833c3b70f9b6cc5ff3e3247b15949eded3cb8d62
-
SHA512
a34ecf9dc5dae22f37d3697a5c4050261ca98f22f3f88108c9c63f02911fe64ed1be9b8608211b8440cb19fd5dbac423d1bbe1c5e70f2e31f0043b8ebbd4daa6
-
SSDEEP
196608:u4Fk4ptoPqwTIr2TLd6bHpYLCWcOge52Tmt6qR5bar/ytJGuDrLygLgF:BFTptrzgLsOWOgED5Rxarat2
Static task
static1
Behavioral task
behavioral1
Sample
UNNAMED3.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
UNNAMED3.exe
-
Size
9.1MB
-
MD5
223ce6bb95cc6072b3c08cdcdf6b2944
-
SHA1
a55afd57e0862347574680bda2ea42ccb6c31bce
-
SHA256
39cc2423c2cd157014637802833c3b70f9b6cc5ff3e3247b15949eded3cb8d62
-
SHA512
a34ecf9dc5dae22f37d3697a5c4050261ca98f22f3f88108c9c63f02911fe64ed1be9b8608211b8440cb19fd5dbac423d1bbe1c5e70f2e31f0043b8ebbd4daa6
-
SSDEEP
196608:u4Fk4ptoPqwTIr2TLd6bHpYLCWcOge52Tmt6qR5bar/ytJGuDrLygLgF:BFTptrzgLsOWOgED5Rxarat2
-
Modifies security service
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
XMRig Miner payload
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Stops running service(s)
-
Deletes itself
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-