Overview

overview

10

Static

static

1

e7a3b43d89...32.exe

windows7-x64

10

e7a3b43d89...32.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e7a3b43d8953d8995090f36601176f32

  • Size

    1.6MB

  • Sample

    230321-ggzl3sah81

  • MD5

    e7a3b43d8953d8995090f36601176f32

  • SHA1

    2aa625e0ca6c00dfebba891aabf6f364519fd26a

  • SHA256

    bca634a2ce6764abb8f7ee5eb594275ae7a919f78fc09ab9937a6196d4b00c56

  • SHA512

    854ec2ca157b640f1561665f5734c10591cee8d61a73a5f6ddb11d04b2eee0bee3a6265bc8f2e54fcbfba892b10d474e76ba0c4edb421ff1185e8f3e635f964f

  • SSDEEP

    24576:TXgUpD815hokdlnI2cVDwf4Bk2I3LbewNSdP4J8q0otqt1px0fZpphBBHIWj:a1ZvCm462I3HbIdQJ86qJepR7

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      e7a3b43d8953d8995090f36601176f32

    • Size

      1.6MB

    • MD5

      e7a3b43d8953d8995090f36601176f32

    • SHA1

      2aa625e0ca6c00dfebba891aabf6f364519fd26a

    • SHA256

      bca634a2ce6764abb8f7ee5eb594275ae7a919f78fc09ab9937a6196d4b00c56

    • SHA512

      854ec2ca157b640f1561665f5734c10591cee8d61a73a5f6ddb11d04b2eee0bee3a6265bc8f2e54fcbfba892b10d474e76ba0c4edb421ff1185e8f3e635f964f

    • SSDEEP

      24576:TXgUpD815hokdlnI2cVDwf4Bk2I3LbewNSdP4J8q0otqt1px0fZpphBBHIWj:a1ZvCm462I3HbIdQJ86qJepR7

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks