General
- Target file.exe
- Size 909KB
- Sample230114-m1n8caec96
- SHA256 7ced0f3f9cecadf17b8aa6f6532a5d8e73680e8f771d4f82053108bc7bf67df2
- MD5 bb4957c2da56d782936816124edf12ba
- SHA1 af359d2a0fe9b919a6cec438f7865535ae89c817
- SHA512 f21e6d416402ad508c5bb001e4c493d10f3c6657fd128a4f6fd3aa559573f56b03f6beecd9f2493b70a9e0419e830efe9bf714984861a4dde12a77cd692d0126
- SSDEEP 24576:cvrUz3MkUSZ+Ay2wZeVUqGOWvtFPXo0gH9RBS3UfiDR6rlar:TwmU7zH6dRBHfiI
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 909KB
- SHA256 7ced0f3f9cecadf17b8aa6f6532a5d8e73680e8f771d4f82053108bc7bf67df2
- MD5 bb4957c2da56d782936816124edf12ba
- SHA1 af359d2a0fe9b919a6cec438f7865535ae89c817
- SHA512 f21e6d416402ad508c5bb001e4c493d10f3c6657fd128a4f6fd3aa559573f56b03f6beecd9f2493b70a9e0419e830efe9bf714984861a4dde12a77cd692d0126
- SSDEEP 24576:cvrUz3MkUSZ+Ay2wZeVUqGOWvtFPXo0gH9RBS3UfiDR6rlar:TwmU7zH6dRBHfiI
- MD5 SHA1 SHA512 SSDEEP
XMRig Miner payload
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Uses the VBS compiler for execution
Suspicious use of SetThreadContext