Resubmissions
27-03-2023 23:39
230327-3nkmdshg5t 1027-03-2023 23:37
230327-3md38ahg4w 1027-03-2023 23:27
230327-3fjp5ahg2v 1027-03-2023 23:07
230327-23689sfg48 1027-03-2023 23:03
230327-21vgpafg38 1027-03-2023 22:59
230327-2yh1wafg28 1027-03-2023 22:53
230327-2t11wshf5y 1027-03-2023 22:51
230327-2st6ysff89 1027-03-2023 22:45
230327-2pn6jaff77 1027-03-2023 22:33
230327-2gm89sff57 10General
-
Target
kYtfk6vbLZvpQOF.exe
-
Size
6MB
-
Sample
230319-c61hfsee93
-
MD5
925b225bdfaec5df3055dfc87431c593
-
SHA1
dc38d7815845e2a63f51f57381899cf7a74f9ea0
-
SHA256
7e47da0e1a15eebd308ddd58d2902104186c817773d7fa5e5ebd7ff282adf489
-
SHA512
2aa927028c9d6d7e03d4cefda3c2bf5277fa2373741407fabf561e40e37b1ecc7aba6278b1b6e26d060a50a52217acee6c332460353eda3168ad72755cae0c95
-
SSDEEP
196608:bI2HdQmRrdA6lXCy1ArqkVpKCX+PrF4Z22eghOJg9:c2HdQOlXrAZYCuPJO22egoJg
Behavioral task
behavioral1
Sample
kYtfk6vbLZvpQOF.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
kYtfk6vbLZvpQOF.exe
-
Size
6MB
-
MD5
925b225bdfaec5df3055dfc87431c593
-
SHA1
dc38d7815845e2a63f51f57381899cf7a74f9ea0
-
SHA256
7e47da0e1a15eebd308ddd58d2902104186c817773d7fa5e5ebd7ff282adf489
-
SHA512
2aa927028c9d6d7e03d4cefda3c2bf5277fa2373741407fabf561e40e37b1ecc7aba6278b1b6e26d060a50a52217acee6c332460353eda3168ad72755cae0c95
-
SSDEEP
196608:bI2HdQmRrdA6lXCy1ArqkVpKCX+PrF4Z22eghOJg9:c2HdQOlXrAZYCuPJO22egoJg
-
XMRig Miner payload
-
Executes dropped EXE
-
Loads dropped DLL
-
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation