Overview

overview

10

Static

static

1

1b0f4c5332...32.exe

windows7-x64

10

1b0f4c5332...32.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b0f4c533211b28c813734a3bb096d32.exe

  • Size

    1.4MB

  • Sample

    230319-tdyltsha87

  • MD5

    1b0f4c533211b28c813734a3bb096d32

  • SHA1

    aea031237368313d66e4ed6ceea56e0ac654ec25

  • SHA256

    1c68418152ba89bcc5058280b5412c07abf9a95b25f09c1102196f45cd922f57

  • SHA512

    9e8196bf2e261f9157b3509179b5f3796ce0d1a3bc6fe13d99d24e51d5c0ebe985e48cf3bc96d26b01ed5c1fbb52e51a40dee08b9a1761d53d84ea505e3a25b3

  • SSDEEP

    24576:QqyjfvAIxb5Kn/+pVcurgdaKVSVRY8t8XS+ZMQ7P8vzWrtlkEQtTHd9DroVwtqqw:QqcXAI15Kkc+gwK4gIOMQ7P8vyrtlmte

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      1b0f4c533211b28c813734a3bb096d32.exe

    • Size

      1.4MB

    • MD5

      1b0f4c533211b28c813734a3bb096d32

    • SHA1

      aea031237368313d66e4ed6ceea56e0ac654ec25

    • SHA256

      1c68418152ba89bcc5058280b5412c07abf9a95b25f09c1102196f45cd922f57

    • SHA512

      9e8196bf2e261f9157b3509179b5f3796ce0d1a3bc6fe13d99d24e51d5c0ebe985e48cf3bc96d26b01ed5c1fbb52e51a40dee08b9a1761d53d84ea505e3a25b3

    • SSDEEP

      24576:QqyjfvAIxb5Kn/+pVcurgdaKVSVRY8t8XS+ZMQ7P8vzWrtlkEQtTHd9DroVwtqqw:QqcXAI15Kkc+gwK4gIOMQ7P8vyrtlmte

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks