Overview

overview

10

Static

static

3

163f2be8ac...ab.exe

windows7-x64

10

163f2be8ac...ab.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    163f2be8acac6f78dff20a6449d739ab

  • Size

    210KB

  • Sample

    231230-mrpgradfg3

  • MD5

    163f2be8acac6f78dff20a6449d739ab

  • SHA1

    5f7c110e12f034a9871d0b4b4e908fdb20a04c86

  • SHA256

    113d0b470dd88e0b13f9ce8cad06ba7f082a2a31495a091a6e3fca5267fef6e1

  • SHA512

    aa642adf7e3508796fc7f5ec892d11a78da991abe1cb80dd9a8325b03d9b7a0d11ef3332e103735f3f18df027b730e9e38607cf27db32784b3ca098beacca437

  • SSDEEP

    6144:0R0RbeUQlnDDd3mg1VF9Vy3HD09K28DoBqrwXTJV4yo:FUUQlnDDgGVFmHA9K2coBK

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      163f2be8acac6f78dff20a6449d739ab

    • Size

      210KB

    • MD5

      163f2be8acac6f78dff20a6449d739ab

    • SHA1

      5f7c110e12f034a9871d0b4b4e908fdb20a04c86

    • SHA256

      113d0b470dd88e0b13f9ce8cad06ba7f082a2a31495a091a6e3fca5267fef6e1

    • SHA512

      aa642adf7e3508796fc7f5ec892d11a78da991abe1cb80dd9a8325b03d9b7a0d11ef3332e103735f3f18df027b730e9e38607cf27db32784b3ca098beacca437

    • SSDEEP

      6144:0R0RbeUQlnDDd3mg1VF9Vy3HD09K28DoBqrwXTJV4yo:FUUQlnDDgGVFmHA9K2coBK

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks