General
- Target file.exe
- Size 889KB
- Sample221230-yenv8sgd59
- SHA256 70ebdf52178dbbbe01cde371e34c63482af72dd9010b451904526943aad511e7
- MD5 8b48f9948f70940693a4e1539c86eeae
- SHA1 c4d2db48c780f3354b8c9659fe5bcfdb73737b13
- SHA512 295efc4bc1a1f848ec9ccc18b900bf3ae55265a2746c1d1e195af653c8a0ae9536885d0f6eff5873048cd1bc7f68554189b297081e243dd985ee9241f0776fc5
- SSDEEP 12288:+tVSX3x7FRSJWeOkDPH4Ua1SAoqpQroHUEMjRT4fJrnv84ZmmDIOpBkekUDeADoZ:+tVSn52gUa4Al6UIT4R3PpBX1nb
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 889KB
- SHA256 70ebdf52178dbbbe01cde371e34c63482af72dd9010b451904526943aad511e7
- MD5 8b48f9948f70940693a4e1539c86eeae
- SHA1 c4d2db48c780f3354b8c9659fe5bcfdb73737b13
- SHA512 295efc4bc1a1f848ec9ccc18b900bf3ae55265a2746c1d1e195af653c8a0ae9536885d0f6eff5873048cd1bc7f68554189b297081e243dd985ee9241f0776fc5
- SSDEEP 12288:+tVSX3x7FRSJWeOkDPH4Ua1SAoqpQroHUEMjRT4fJrnv84ZmmDIOpBkekUDeADoZ:+tVSn52gUa4Al6UIT4R3PpBX1nb
- MD5 SHA1 SHA512 SSDEEP
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext