General
- Target file.exe
- Size 938KB
- Sample221225-mjs5zaee4t
- SHA256 4526edce99a91c9414d24578035afe430a94acbbad16ac7f97a4d292dd60bbce
- MD5 9b69d7cee48e241bcb93b01ce600ea8e
- SHA1 e59cd3cee644283ae7c946159d3dbb68e0e556b3
- SHA512 880573d1b8fb5483e5872e353ea5965f3c07c1202548cd56bf2969cff6dfa8f1bf1b820143c7fcc6f0b1da2edb22c817bed03a9c1457070dd2359b72616bc6e1
- SSDEEP 24576:Ji8r/wvrUz3MkUSZ+AbLARF+x8tAIHCzsoWlGHBmjkySJs:x2RgxDzsXqBmjk1K
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 938KB
- SHA256 4526edce99a91c9414d24578035afe430a94acbbad16ac7f97a4d292dd60bbce
- MD5 9b69d7cee48e241bcb93b01ce600ea8e
- SHA1 e59cd3cee644283ae7c946159d3dbb68e0e556b3
- SHA512 880573d1b8fb5483e5872e353ea5965f3c07c1202548cd56bf2969cff6dfa8f1bf1b820143c7fcc6f0b1da2edb22c817bed03a9c1457070dd2359b72616bc6e1
- SSDEEP 24576:Ji8r/wvrUz3MkUSZ+AbLARF+x8tAIHCzsoWlGHBmjkySJs:x2RgxDzsXqBmjk1K
- MD5 SHA1 SHA512 SSDEEP
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext