General
- Target file.exe
- Size 1.0MB
- Sample230113-vypebsef9x
- SHA256 8e9422d256014b314558d327aea023697c6e1ef7fd268c72b814b1d65ea732ae
- MD5 c2aee4c17a1afc9780b2b0b6c96f37de
- SHA1 987201b1260b5ba0f7303eb9728bec76baa227bb
- SHA512 003e78cccd31fa2961e11957984cab7b9bd4b9322c9ecc85d49f58e500f3aa8d9e2356b2c3e623e44d8a01734384063463881b44ad09a133d128411918abb80f
- SSDEEP 24576:rvrUz3MkUSZ+AnfEAZIAwQ+BGNp7U5TLLNQQNhP4RL0:GEA5wQNp785bPQL0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 1.0MB
- SHA256 8e9422d256014b314558d327aea023697c6e1ef7fd268c72b814b1d65ea732ae
- MD5 c2aee4c17a1afc9780b2b0b6c96f37de
- SHA1 987201b1260b5ba0f7303eb9728bec76baa227bb
- SHA512 003e78cccd31fa2961e11957984cab7b9bd4b9322c9ecc85d49f58e500f3aa8d9e2356b2c3e623e44d8a01734384063463881b44ad09a133d128411918abb80f
- SSDEEP 24576:rvrUz3MkUSZ+AnfEAZIAwQ+BGNp7U5TLLNQQNhP4RL0:GEA5wQNp785bPQL0
- MD5 SHA1 SHA512 SSDEEP
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext