Overview

overview

10

Static

static

10

pdfeditor/...64.sys

windows7-x64

1

pdfeditor/...64.sys

windows10-1703-x64

1

pdfeditor/...64.sys

windows10-2004-x64

1

pdfeditor/...64.sys

windows11-21h2-x64

1

pdfeditor/...0M.cmd

windows7-x64

1

pdfeditor/...0M.cmd

windows10-1703-x64

1

pdfeditor/...0M.cmd

windows10-2004-x64

1

pdfeditor/...0M.cmd

windows11-21h2-x64

1

pdfeditor/...1M.cmd

windows7-x64

1

pdfeditor/...1M.cmd

windows10-1703-x64

1

pdfeditor/...1M.cmd

windows10-2004-x64

1

pdfeditor/...1M.cmd

windows11-21h2-x64

1

pdfeditor/...or.exe

windows7-x64

10

pdfeditor/...or.exe

windows10-1703-x64

10

pdfeditor/...or.exe

windows10-2004-x64

10

pdfeditor/...or.exe

windows11-21h2-x64

10

pdfeditor/...le.cmd

windows7-x64

1

pdfeditor/...le.cmd

windows10-1703-x64

1

pdfeditor/...le.cmd

windows10-2004-x64

1

pdfeditor/...le.cmd

windows11-21h2-x64

1

pdfeditor/...le.cmd

windows7-x64

1

pdfeditor/...le.cmd

windows10-1703-x64

1

pdfeditor/...le.cmd

windows10-2004-x64

1

pdfeditor/...le.cmd

windows11-21h2-x64

1

pdfeditor/...le.cmd

windows7-x64

1

pdfeditor/...le.cmd

windows10-1703-x64

1

pdfeditor/...le.cmd

windows10-2004-x64

1

pdfeditor/...le.cmd

windows11-21h2-x64

1

pdfeditor/start.cmd

windows7-x64

10

pdfeditor/start.cmd

windows10-1703-x64

10

pdfeditor/start.cmd

windows10-2004-x64

10

pdfeditor/start.cmd

windows11-21h2-x64

10

Resubmissions

04/01/2024, 10:21

240104-md6twagbd4 10

26/12/2023, 11:38

231226-nry7mafbb5 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8381e02189f0bd728b557fa5f811132e760771e095bc9b0a93412431e9c9589a

  • Size

    3.3MB

  • Sample

    240104-md6twagbd4

  • MD5

    120401f2074c122211582c3d3c0b526a

  • SHA1

    d867681b04b3f7221e2e1e89794f29587cb6a279

  • SHA256

    8381e02189f0bd728b557fa5f811132e760771e095bc9b0a93412431e9c9589a

  • SHA512

    b620b510634368edb37439d382afbbbfab5b98be5d3cd4f98906f625b97f3bb2470cf5b8458d50c6b897fbd1435d47144e25bf0a60d4b1d35d971a74d5d483c1

  • SSDEEP

    98304:QbJBxi6V8aYgWW0I7IoT9HhuEyb+XY3B+rB94Ag2w:yfOgWWbHjyLB+rB94N3

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      pdfeditor/WinRing0x64.sys

    • Size

      14KB

    • MD5

      0c0195c48b6b8582fa6f6373032118da

    • SHA1

      d25340ae8e92a6d29f599fef426a2bc1b5217299

    • SHA256

      11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5

    • SHA512

      ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d

    • SSDEEP

      192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

    • Target

      pdfeditor/benchmark_10M.cmd

    • Size

      61B

    • MD5

      5be1c4cacb5ae37c43527e99a097dc7a

    • SHA1

      1b2f00fefde9d601764d5d26d5e0fb2b9f58074c

    • SHA256

      235a64e3520b1c2c27763122b303f78aee8d7c083dfd9f1eb936cd5174383609

    • SHA512

      20a9e18bc397fe86514875af4213a02a5831a27671370849f05c2f3ba048bc29fc41ca96f0cb1cc08aaff27bbebf637f30d2ee798cb80ed03080e8c7d8f2d9a1

    Score
    1/10
    behavioral5behavioral6behavioral7behavioral8

    • Target

      pdfeditor/benchmark_1M.cmd

    • Size

      60B

    • MD5

      cba1927cf6959dc99ecbd0c553e4db6f

    • SHA1

      7f2d59cfdf2b0550d22ac54d0b1fa5ac8f8b5f57

    • SHA256

      d7747e7a3c782009f4ceb6e9c106115876386853929563b509da5258e3968d15

    • SHA512

      c78ab9b017153c497ef2d0f568ade265ae9b60238ebdb36d8ef7ecc4d232cd90fd5fdc5b600bb26437466c7300e571b95b4ff92a7f024a981a02196a14d6e3f1

    Score
    1/10
    behavioral10behavioral11behavioral12behavioral9

    • Target

      pdfeditor/pdfeditor.exe

    • Size

      7.9MB

    • MD5

      f4201919f4e30383f9b7bc56451c0cd7

    • SHA1

      00aa399ec3a7d774ccaf6bcd94a1a25eacdd1a09

    • SHA256

      cd75dde68d57b6789435579a5c583505b354e5e3571baa03482a7bda7eccc5ff

    • SHA512

      ac6c269907ad6b37231894a78ae4c62be637f8627f7259f6d745f693356e1b7ca0d4e53ab42937a01a33fccd384af0571b77e2fe9b75604695b5c7d405b12e18

    • SSDEEP

      98304:sLsUYfB9pOp/BWLbrkShfa+XQD/YPLTDtU5SXXMQHJw7ZB87TtIeUK+MzfL7cybS:lgp/NQ7rfWOlb1paSbkJFsxfKLNIS

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner
    behavioral13behavioral14behavioral15behavioral16

    • Target

      pdfeditor/pool_mine_example.cmd

    • Size

      1023B

    • MD5

      2e737f5c3af9c8aa5216dfdc5be02cc6

    • SHA1

      05fe2040aea6f6cff25deaf5ca2ca6793faa64c7

    • SHA256

      e73491065d86b1ad69229bb5d2019e08b947e11a2a57adf5c2d9a2b5d8f4acad

    • SHA512

      ce0e12a544623458f5905ea20f2b6f0e75cfb57add912290fbf2611eddbe98de7ffed3c9e650747967b2620e5ebbe33e249cbd60e7032bdb10c909cc516709ca

    Score
    1/10
    behavioral17behavioral18behavioral19behavioral20

    • Target

      pdfeditor/rtm_ghostrider_example.cmd

    • Size

      1KB

    • MD5

      3f0155abe745be1f6089eafc4f517ac8

    • SHA1

      277f510ceb62b277b141d094c82eedebdc6f3a35

    • SHA256

      810614290bdb14d2ddf10f65f8adc988a8272764f2a9e2c378e52fad162da344

    • SHA512

      8def46852a962ff5dbed94e01f8d23019ef401a718d9c5a440d12b2ffa369539be328f165f68ccc2098cd5e5c939bcb5f784f877bdd7b9d939393bbd2229d19e

    Score
    1/10
    behavioral21behavioral22behavioral23behavioral24

    • Target

      pdfeditor/solo_mine_example.cmd

    • Size

      821B

    • MD5

      090703e56f46330ed625ac4363c9d25c

    • SHA1

      6ce0b265e0860f1913f4bb37a17aa7eda88641c5

    • SHA256

      33497c69c21fa96bbc96f1d7f09608e462f8ab22555364977c0bd35fef27bc29

    • SHA512

      1cd8c43287508c9393300d5a22c565d2f4bd98493a203112fd727518a4e439eb74035d18fe1f52e2d3594305a841ca93fcd0e3c61634f0992cfd3fc253872f19

    Score
    1/10
    behavioral25behavioral26behavioral27behavioral28

    • Target

      pdfeditor/start.cmd

    • Size

      48B

    • MD5

      7a5f44ef0fcb9b3b66c65fc36aabf0af

    • SHA1

      76887427c1a843b35de8920f93fa744b1abb5a67

    • SHA256

      56cc2f42fb9967cb986ce44a3530481f2c4f6e79a935e829a8285d023b820763

    • SHA512

      5a128e128e1ebb2c5c265f0dcded63f818ae9d7ac11cd5c10cf89fdebf7ccae5fe78a725ef96aeb6235db396cecbe86d43b2a15b7228f966cd55b7119d7e2490

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner
    behavioral29behavioral30behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks

static1

minerxmrig
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

xmrigminer
Score
10/10

behavioral14

xmrigminer
Score
10/10

behavioral15

xmrigminer
Score
10/10

behavioral16

xmrigminer
Score
10/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

xmrigminer
Score
10/10

behavioral30

xmrigminer
Score
10/10

behavioral31

xmrigminer
Score
10/10

behavioral32

xmrigminer
Score
10/10