Overview

overview

10

Static

static

3

acbb006e80...e5.exe

windows7-x64

10

acbb006e80...e5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    acbb006e8058c64550ee9eecbf2af3e5

  • Size

    2.0MB

  • Sample

    231222-q27mvsebh6

  • MD5

    acbb006e8058c64550ee9eecbf2af3e5

  • SHA1

    d130ad978d321334a4a3796bdd923c8eeb1a3c5a

  • SHA256

    4c47805425ed2fe731a5ae0c0b6d9664ac099f829fce0c89728ab1660a560450

  • SHA512

    385f44b8161563d9b9e625bcb0ccfa74f3f1fb28af91fce6095b4b2b8003661957ade0b3ff70d8dd74d5ecaf39a53bd4168c626141b19822931e7801e011a523

  • SSDEEP

    24576:FntPnQqwZVK4GzGjr5TFN0qT3oMfA85FmCdy007dYbgRXs9PQBvcipHoauqLjuCb:ht4qwvizGr5TFNX087oRXn/oLCLP

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      acbb006e8058c64550ee9eecbf2af3e5

    • Size

      2.0MB

    • MD5

      acbb006e8058c64550ee9eecbf2af3e5

    • SHA1

      d130ad978d321334a4a3796bdd923c8eeb1a3c5a

    • SHA256

      4c47805425ed2fe731a5ae0c0b6d9664ac099f829fce0c89728ab1660a560450

    • SHA512

      385f44b8161563d9b9e625bcb0ccfa74f3f1fb28af91fce6095b4b2b8003661957ade0b3ff70d8dd74d5ecaf39a53bd4168c626141b19822931e7801e011a523

    • SSDEEP

      24576:FntPnQqwZVK4GzGjr5TFN0qT3oMfA85FmCdy007dYbgRXs9PQBvcipHoauqLjuCb:ht4qwvizGr5TFNX087oRXn/oLCLP

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks