Overview

overview

10

Static

static

3

be4b0601f8...14.exe

windows7-x64

10

be4b0601f8...14.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    be4b0601f877348efa8be56c317af214

  • Size

    2.0MB

  • Sample

    240310-lrkccsaa6v

  • MD5

    be4b0601f877348efa8be56c317af214

  • SHA1

    bdc96515c536f42b4795ce37bf0ddd1cd8924392

  • SHA256

    ffbecbccd5aa5cdbc150c3aae2b6341d472ac86334062dbcb7cf1f9125aa2e6e

  • SHA512

    fe43dc2672bcd8f201b6b31f8659285179e7d641a31eb9c1284b70537b97cf63dd87c5d7f6e3cc15e2f44407f0ca530b3eda109f6146498f127fecee0c7e5641

  • SSDEEP

    49152:QPvURIP8C3jbb3UEym/egMXP8MkFc7KAB5a237kku:YvAIEA3h324kKAm23x

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      be4b0601f877348efa8be56c317af214

    • Size

      2.0MB

    • MD5

      be4b0601f877348efa8be56c317af214

    • SHA1

      bdc96515c536f42b4795ce37bf0ddd1cd8924392

    • SHA256

      ffbecbccd5aa5cdbc150c3aae2b6341d472ac86334062dbcb7cf1f9125aa2e6e

    • SHA512

      fe43dc2672bcd8f201b6b31f8659285179e7d641a31eb9c1284b70537b97cf63dd87c5d7f6e3cc15e2f44407f0ca530b3eda109f6146498f127fecee0c7e5641

    • SSDEEP

      49152:QPvURIP8C3jbb3UEym/egMXP8MkFc7KAB5a237kku:YvAIEA3h324kKAm23x

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks