Resubmissions

11-03-2024 21:08

240311-zy7ywsed31 10

11-03-2024 21:06

240311-zx53xagd73 10

11-03-2024 21:02

240311-zvwrfsec3x 10

11-03-2024 21:01

240311-ztxx5aeb9x 10

11-03-2024 20:59

240311-zs72psgc56 10

11-03-2024 20:57

240311-zrmpdaeb3v 10

11-03-2024 20:56

240311-zqzbsagb66 10

11-03-2024 20:55

240311-zqlexsgb55 10

11-03-2024 20:54

240311-zp4j4sgb43 10

11-03-2024 20:53

240311-zplz3agb32 10

General

  • Target

    NV.rar

  • Size

    39KB

  • Sample

    240311-zs72psgc56

  • MD5

    86e334ab5aaf97ff89ee3f44f5d3a971

  • SHA1

    1129a8eb70fdfc056576769a9d93651f8243b8b7

  • SHA256

    4c911d7d2e043676fb0b4ff128bebd9206dae91049cbd1827c6edabded461baa

  • SHA512

    dd96cce98eb4a809d30553e8b458dd089831e326a0b43894d13001b59bca6b77c0f71781b4cfd0d1348ca7317c5aee82f53e935fdc57bd190c8f5c72d8a226ff

  • SSDEEP

    384:FWf/WfFWf8WfAWfTWffWfBWfBWfBWfzWf9Wf2QWfzWf0Wf4:F+IHjQMuY664zQ6Vb

Score
10/10

Malware Config

Targets

    • Target

      test - Copy (10).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (11).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (12).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (13).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (14).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (2).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (3).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (4).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (5).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (6).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (7).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (8).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy (9).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target

      test.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks