General
- Target file.exe
- Size 957KB
- Sample221229-tzt6jade44
- SHA256 ae2e7547c8d73f63d7d1f8b428c8475d14e86d66faa48cfb17b5fc025d5731a7
- MD5 e9d0db5f69e7fa442ce70b2aa1433eaa
- SHA1 63bc73007ca3654b1ecda5f255d6b482424be3ad
- SHA512 489d0902648e268317efc1edf641fa1eb6df7e7e4bd86784bf59c38039821304dd96117825562e3740d8a6e585d8927c984bb6a22a21ea267b2376ec3aa6ca2b
- SSDEEP 24576:QtVSn52JQY2nTHf3eEZie/slFsNdIZ8xU:ySn52JQYotZPsodU
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 957KB
- SHA256 ae2e7547c8d73f63d7d1f8b428c8475d14e86d66faa48cfb17b5fc025d5731a7
- MD5 e9d0db5f69e7fa442ce70b2aa1433eaa
- SHA1 63bc73007ca3654b1ecda5f255d6b482424be3ad
- SHA512 489d0902648e268317efc1edf641fa1eb6df7e7e4bd86784bf59c38039821304dd96117825562e3740d8a6e585d8927c984bb6a22a21ea267b2376ec3aa6ca2b
- SSDEEP 24576:QtVSn52JQY2nTHf3eEZie/slFsNdIZ8xU:ySn52JQYotZPsodU
- MD5 SHA1 SHA512 SSDEEP
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext