General
- Target file.exe
- Size 989KB
- Sample230108-2pypzafa52
- SHA256 015c55d8aea4cee3387e2a206705d0d1a853b21e1076e19b77aa481c7c2d79f2
- MD5 1243ca7b7818f0851efb3b26a60dc5f9
- SHA1 d8d28b386ee1c38fde8f5d76ad11d734e48a9a2c
- SHA512 b450979a21f9e0dd3d7a68c9fb6dc4325d8096cc02eaac35f79b43fc9b92c4cd7559a0f592eeaddcb677e4c9548c943b974b7be0db02eaf8f6b75c341b6c0650
- SSDEEP 24576:4RIx4svng/ho1Xv4bqKUrE9bQkx6kAhiRrOWpL:4RENvng/hGvtVrxa6jho
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 989KB
- SHA256 015c55d8aea4cee3387e2a206705d0d1a853b21e1076e19b77aa481c7c2d79f2
- MD5 1243ca7b7818f0851efb3b26a60dc5f9
- SHA1 d8d28b386ee1c38fde8f5d76ad11d734e48a9a2c
- SHA512 b450979a21f9e0dd3d7a68c9fb6dc4325d8096cc02eaac35f79b43fc9b92c4cd7559a0f592eeaddcb677e4c9548c943b974b7be0db02eaf8f6b75c341b6c0650
- SSDEEP 24576:4RIx4svng/ho1Xv4bqKUrE9bQkx6kAhiRrOWpL:4RENvng/hGvtVrxa6jho
- MD5 SHA1 SHA512 SSDEEP
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext