General

  • Target

    04133a85722f58d51187f6227a03301e

  • Size

    1.5MB

  • Sample

    231229-zz2hhabbdm

  • MD5

    04133a85722f58d51187f6227a03301e

  • SHA1

    a9b0a0697d4ce2d98b6e7c2d64572e7c8c6120bc

  • SHA256

    22b4aa75debcb39f7a89a8621582766671ee52c8504dd667b2936b87eb242bbc

  • SHA512

    4b7af1e38d4266741d77549f77a5b4c66fa4c054521f9cf1abd1a63acdd97a220f5ceb82369df03ab7524cfae76513abead536b5f81451cf63b442d09144fd11

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkiYQu50hCoolSncMKe0KXb4qMCMm/lG07Sj0P0gh:Lz071uv4BPMkiYF2KeJkA

Score
10/10

Malware Config

Targets

    • Target

      04133a85722f58d51187f6227a03301e

    • Size

      1.5MB

    • MD5

      04133a85722f58d51187f6227a03301e

    • SHA1

      a9b0a0697d4ce2d98b6e7c2d64572e7c8c6120bc

    • SHA256

      22b4aa75debcb39f7a89a8621582766671ee52c8504dd667b2936b87eb242bbc

    • SHA512

      4b7af1e38d4266741d77549f77a5b4c66fa4c054521f9cf1abd1a63acdd97a220f5ceb82369df03ab7524cfae76513abead536b5f81451cf63b442d09144fd11

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkiYQu50hCoolSncMKe0KXb4qMCMm/lG07Sj0P0gh:Lz071uv4BPMkiYF2KeJkA

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks