Overview

overview

10

Static

static

8

6miner-v0....ws.zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6miner-v0.1.0-x64-windows.zip

  • Size

    5.5MB

  • Sample

    221125-lnwwzscb2v

  • MD5

    728501180c56c11ded4881c99a7e0669

  • SHA1

    cf955e4801b243de6455866d9e7bc165a9aff66a

  • SHA256

    be2ad91acef94958c257147dad7cb49a8a1490d076e4d2d3b08862f6d06a89c4

  • SHA512

    dcc84a39fb5766114cbbb656f7065ee7e54aced1140d7fa6125a12d7dbc95ac26ad7610184ab186587aa0e99c62c3737c516accdd45f264c02df4e79591689f4

  • SSDEEP

    98304:7B5LzXHjRZ6MXwbyRedErvf1ay2bz+0Tfzu0te/OTPSGo7TL+F5OSBGyAh9:7BdRIMXwbyIEB03O2iOTaGIvMOQGyq9

Score
10/10
evasionpersistencevmprotect

Malware Config

Targets

    • Target

      6miner-v0.1.0-x64-windows.zip

    • Size

      5.5MB

    • MD5

      728501180c56c11ded4881c99a7e0669

    • SHA1

      cf955e4801b243de6455866d9e7bc165a9aff66a

    • SHA256

      be2ad91acef94958c257147dad7cb49a8a1490d076e4d2d3b08862f6d06a89c4

    • SHA512

      dcc84a39fb5766114cbbb656f7065ee7e54aced1140d7fa6125a12d7dbc95ac26ad7610184ab186587aa0e99c62c3737c516accdd45f264c02df4e79591689f4

    • SSDEEP

      98304:7B5LzXHjRZ6MXwbyRedErvf1ay2bz+0Tfzu0te/OTPSGo7TL+F5OSBGyAh9:7BdRIMXwbyIEB03O2iOTaGIvMOQGyq9

    Score
    10/10
    evasionpersistencevmprotect

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks