General
- Target file.exe
- Size 1.6MB
- Sample230116-mv4e3sdg95
- SHA256 c077b97724c3f3ae8f3d7eed5a73bff5ef3d9673e6fec6563fa7a8ae6ab6fc34
- MD5 a7648e5b8540a24352e78c6426bed156
- SHA1 eff7726cf3586a7e8b0f1386a4f53b4dd75b6965
- SHA512 ca91e9beb5d29aa70552badf602a547cf29ce405bf1ab45a4922e31a9990f3e7d0b28a5311ebf4be06edbd8e5f79b4a355cf8ec5ca77a4276482303ead7fc54c
- SSDEEP 24576:y8avu/lnEVlp0q4ssJ8YtY1v9ZJK3+2gD4JtZIOpTq5l9fuHPGEq7:Xc7p0qNsJ8DfJKZ8M5a92HPQ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 1.6MB
- SHA256 c077b97724c3f3ae8f3d7eed5a73bff5ef3d9673e6fec6563fa7a8ae6ab6fc34
- MD5 a7648e5b8540a24352e78c6426bed156
- SHA1 eff7726cf3586a7e8b0f1386a4f53b4dd75b6965
- SHA512 ca91e9beb5d29aa70552badf602a547cf29ce405bf1ab45a4922e31a9990f3e7d0b28a5311ebf4be06edbd8e5f79b4a355cf8ec5ca77a4276482303ead7fc54c
- SSDEEP 24576:y8avu/lnEVlp0q4ssJ8YtY1v9ZJK3+2gD4JtZIOpTq5l9fuHPGEq7:Xc7p0qNsJ8DfJKZ8M5a92HPQ
- MD5 SHA1 SHA512 SSDEEP
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext