Extracted

• • Target

    tmp

  • Size

    4.1MB

  • MD5

    0630254696658572f31b822013f00a6a

  • SHA1

    241bcfe568b698a0560c646bfd392f39f18b7eb3

  • SHA256

    4b881729396aae4d3e2db8717899acf7a07a0979075f633e83c2e397ba1d0498

  • SHA512

    78a2fad72951622889a0fa11ae0b1fcf76b75a0e1da806b2838b05fe4baebe2df6f8f1b871e2f6c4e1ab6c7af9c835bb516220e805ae7ac3b57df58018365404

  • SSDEEP

    49152:e5ZyS3M73PwAERsyxudJziMv6nWPdofD4Oj03DC:e5ZyS3KwAERJxudJpd04n

  Score

  10^/10

  loaderbotxmrigloaderminerpersistence

  • LoaderBot

    LoaderBot is a loader written in .NET downloading and executing miners.

    loaderminerloaderbot

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig

  • LoaderBot executable

  • XMRig Miner payload

    miner

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2