Resubmissions
27-03-2023 23:01
230327-2zn9aafg35 1027-03-2023 22:49
230327-2rnmsaff86 1027-03-2023 22:37
230327-2j1blshf2x 1027-03-2023 22:31
230327-2fgp4ahe9x 1027-03-2023 22:23
230327-2atgpsff37 1027-03-2023 23:51
230327-3v719sfh6727-03-2023 23:49
230327-3t2g4afh6427-03-2023 23:47
230327-3sv9pafh5827-03-2023 23:35
230327-3k79aafh3427-03-2023 23:33
230327-3j21wafh26General
-
Target
JneGIbdsQ29LT92.exe
-
Size
6MB
-
Sample
230319-cz5tlagf2z
-
MD5
925b225bdfaec5df3055dfc87431c593
-
SHA1
dc38d7815845e2a63f51f57381899cf7a74f9ea0
-
SHA256
7e47da0e1a15eebd308ddd58d2902104186c817773d7fa5e5ebd7ff282adf489
-
SHA512
2aa927028c9d6d7e03d4cefda3c2bf5277fa2373741407fabf561e40e37b1ecc7aba6278b1b6e26d060a50a52217acee6c332460353eda3168ad72755cae0c95
-
SSDEEP
196608:bI2HdQmRrdA6lXCy1ArqkVpKCX+PrF4Z22eghOJg9:c2HdQOlXrAZYCuPJO22egoJg
Malware Config
Targets
-
-
Target
JneGIbdsQ29LT92.exe
-
Size
6MB
-
MD5
925b225bdfaec5df3055dfc87431c593
-
SHA1
dc38d7815845e2a63f51f57381899cf7a74f9ea0
-
SHA256
7e47da0e1a15eebd308ddd58d2902104186c817773d7fa5e5ebd7ff282adf489
-
SHA512
2aa927028c9d6d7e03d4cefda3c2bf5277fa2373741407fabf561e40e37b1ecc7aba6278b1b6e26d060a50a52217acee6c332460353eda3168ad72755cae0c95
-
SSDEEP
196608:bI2HdQmRrdA6lXCy1ArqkVpKCX+PrF4Z22eghOJg9:c2HdQOlXrAZYCuPJO22egoJg
Score10/10-
XMRig Miner payload
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
Executes dropped EXE
-
Loads dropped DLL
-
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation