Overview

overview

10

Static

static

1

winprofile

windows7-x64

1

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4a49f5cce550802239f4e18d4dec9bb2952190eada5e346bebe285690d803dac

  • Size

    63KB

  • Sample

    230321-felrrsgg87

  • MD5

    c81cde0265b8c5a66b5eaf5f7d5ac9aa

  • SHA1

    212489b68f922ab2d96d9c634ad86cf6324f0cc8

  • SHA256

    4a49f5cce550802239f4e18d4dec9bb2952190eada5e346bebe285690d803dac

  • SHA512

    b0b935847ab4100ac873da973f7eb8a52506a1a8cc1edca879115fead2634cf953c25e78fb3d6360db5f386bfe453fdf9df253b2084839ed0d629c7e77533bb3

  • SSDEEP

    1536:/AStOLuCNRYELEcEASBMbE1VVAjMEzcsftw9T:/cBVDSBMbE1VVAjMEzcsfOZ

Score
10/10
xmrigminerpersistence

Malware Config

Targets

    • Target

      4a49f5cce550802239f4e18d4dec9bb2952190eada5e346bebe285690d803dac

    • Size

      63KB

    • MD5

      c81cde0265b8c5a66b5eaf5f7d5ac9aa

    • SHA1

      212489b68f922ab2d96d9c634ad86cf6324f0cc8

    • SHA256

      4a49f5cce550802239f4e18d4dec9bb2952190eada5e346bebe285690d803dac

    • SHA512

      b0b935847ab4100ac873da973f7eb8a52506a1a8cc1edca879115fead2634cf953c25e78fb3d6360db5f386bfe453fdf9df253b2084839ed0d629c7e77533bb3

    • SSDEEP

      1536:/AStOLuCNRYELEcEASBMbE1VVAjMEzcsftw9T:/cBVDSBMbE1VVAjMEzcsfOZ

    Score
    10/10
    xmrigminerpersistence

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks