General

  • Target

    2450010dbbf01e3bd6b48f8dea651abc

  • Size

    784KB

  • Sample

    231231-csw8wagef2

  • MD5

    2450010dbbf01e3bd6b48f8dea651abc

  • SHA1

    3aa3b29a95b56842680e533c3bce901d1436a90b

  • SHA256

    21ba3d4e24ac6481fde46f4eec74280487e0909b5b0cedbe06e16ce928e3500e

  • SHA512

    5720f703032035d78c43324bef7074f22072a3a579957305965ac787291ce3717d27eacfd230be40f06e36b020b5f2228ac50e8224a770353438a5bc9b11a6e8

  • SSDEEP

    24576:kF8d4Qlca1kkt3C/5ACUaSnR0KaHl5iITs:MSR1pCUXRaHGI

Score
10/10

Malware Config

Targets

    • Target

      2450010dbbf01e3bd6b48f8dea651abc

    • Size

      784KB

    • MD5

      2450010dbbf01e3bd6b48f8dea651abc

    • SHA1

      3aa3b29a95b56842680e533c3bce901d1436a90b

    • SHA256

      21ba3d4e24ac6481fde46f4eec74280487e0909b5b0cedbe06e16ce928e3500e

    • SHA512

      5720f703032035d78c43324bef7074f22072a3a579957305965ac787291ce3717d27eacfd230be40f06e36b020b5f2228ac50e8224a770353438a5bc9b11a6e8

    • SSDEEP

      24576:kF8d4Qlca1kkt3C/5ACUaSnR0KaHl5iITs:MSR1pCUXRaHGI

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Matrix

Tasks