General

  • Target

    33035a718f5445742b82707f0ba6aff80337cac1e89b6b3b8b51177c7f9f578a

  • Size

    62KB

  • Sample

    230404-fwg5xaeh21

  • MD5

    09a29f3b529c5e9ab25a47973bb0900a

  • SHA1

    b8dce851d01dbe0335f11fa8449b52a2270776e6

  • SHA256

    33035a718f5445742b82707f0ba6aff80337cac1e89b6b3b8b51177c7f9f578a

  • SHA512

    35e92a26fc392b15eb7fd78ca1f6a6c08afe42ed535fd020237215d7f4db0f66fa0676eb70d646f8790c9724c30c605a99b33cf6a6c84c3de78f6061f1a48efb

  • SSDEEP

    1536:s2JbaiIZApuLzOgkx9MbEze4g3ViceSITKdU:dbahZApuL1kx9MbEze4g3ViceYO

Score
10/10

Malware Config

Targets

    • Target

      33035a718f5445742b82707f0ba6aff80337cac1e89b6b3b8b51177c7f9f578a

    • Size

      62KB

    • MD5

      09a29f3b529c5e9ab25a47973bb0900a

    • SHA1

      b8dce851d01dbe0335f11fa8449b52a2270776e6

    • SHA256

      33035a718f5445742b82707f0ba6aff80337cac1e89b6b3b8b51177c7f9f578a

    • SHA512

      35e92a26fc392b15eb7fd78ca1f6a6c08afe42ed535fd020237215d7f4db0f66fa0676eb70d646f8790c9724c30c605a99b33cf6a6c84c3de78f6061f1a48efb

    • SSDEEP

      1536:s2JbaiIZApuLzOgkx9MbEze4g3ViceSITKdU:dbahZApuL1kx9MbEze4g3ViceYO

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Command and Control

Web Service

1
T1102

Tasks