Overview

overview

10

Static

static

1

8b861b1428...07.exe

windows7-x64

5

8b861b1428...07.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b861b1428fc7b34a8845303bf0a70bcf7a97fee14cfac5ee467293eec7ff407.zip

  • Size

    3.5MB

  • Sample

    230308-pzqqwsac2t

  • MD5

    faa91641baa210719e9d67621e6d981f

  • SHA1

    a8db9df5555fad941f7c1ce879d8dcf6581cecde

  • SHA256

    d5bd46fa5da1315d7a3265e60642c03fa667b52f7607854295c5749fdb759abb

  • SHA512

    691af37fbeb07bdeb3f17cb5c02b57bcfb92b4ed0b8d4c4df41b558fe8a0fd028d68b0f9441db3082d29025a895113fc849ffbe5953cd749ecfb9920e95715bc

  • SSDEEP

    98304:rXgU7TFTXoAVqkdXg/rQrplpQfQkGX2SD:rXgsTXoCtXAulpPkGXxD

Score
10/10
xmrigminerpersistence

Malware Config

Targets

    • Target

      8b861b1428fc7b34a8845303bf0a70bcf7a97fee14cfac5ee467293eec7ff407.exe

    • Size

      4.9MB

    • MD5

      067f1db9fbb391bc49dc3fa18a703b94

    • SHA1

      b533f7effa5249b8a59074c1a841c09ee644886e

    • SHA256

      8b861b1428fc7b34a8845303bf0a70bcf7a97fee14cfac5ee467293eec7ff407

    • SHA512

      f7d303e01a62573e4cd409fd673e198c24b0703f255c799966ef580d593f2bb5285db546e7b0d3d2c3de4a04c7509273b0fe8aef2bf7870f6b2586cdde7fb8e0

    • SSDEEP

      49152:wX42LgSkkLyyn3NWaZGTqE7s+9p7dx60cWkYtXAmd4NNNQazPUd6birCa9YioXcu:E+p7dx60BtQmdgVYd6b7a97oXc7u

    Score
    10/10
    xmrigminerpersistence

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks