Overview

overview

10

Static

static

3

66651effcf...c5.exe

windows7-x64

1

66651effcf...c5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    66651effcfaeeda4092379d1a64731c5.exe

  • Size

    3.5MB

  • Sample

    230616-fsjvbsch59

  • MD5

    66651effcfaeeda4092379d1a64731c5

  • SHA1

    9e141a598d379081a42256b7e8964259d8163d74

  • SHA256

    ead5ece96523e3ff2fef6e9c60f65ae6cdd160bef1c32ced53b4e4f3d43ddb58

  • SHA512

    900eedb30a7e9ee67e2609dce0cc3d2d0df2afaeca23c8a5209d3f0f9bb61a3fa2b731519bba82cfadc183433eee74a3aef72d4b2159cb797409116c4832deea

  • SSDEEP

    98304:XAD2yUozo9I2lYR0lcnYMMlX6gMEcGHVK:RB9feR0qpMV/MEcJ

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      66651effcfaeeda4092379d1a64731c5.exe

    • Size

      3.5MB

    • MD5

      66651effcfaeeda4092379d1a64731c5

    • SHA1

      9e141a598d379081a42256b7e8964259d8163d74

    • SHA256

      ead5ece96523e3ff2fef6e9c60f65ae6cdd160bef1c32ced53b4e4f3d43ddb58

    • SHA512

      900eedb30a7e9ee67e2609dce0cc3d2d0df2afaeca23c8a5209d3f0f9bb61a3fa2b731519bba82cfadc183433eee74a3aef72d4b2159cb797409116c4832deea

    • SSDEEP

      98304:XAD2yUozo9I2lYR0lcnYMMlX6gMEcGHVK:RB9feR0qpMV/MEcJ

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks