Overview

overview

10

Static

static

3

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...2).exe

windows10-2004-x64

7

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...3).exe

windows10-2004-x64

10

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...4).exe

windows10-2004-x64

7

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...2).exe

windows10-2004-x64

7

test - Cop...3).exe

windows10-2004-x64

10

test - Cop...2).exe

windows10-2004-x64

10

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...py.exe

windows10-2004-x64

7

test - Cop...py.exe

windows10-2004-x64

7

test - Cop...py.exe

windows10-2004-x64

7

Resubmissions

13/03/2024, 08:45

240313-knsznahb2w10

13/03/2024, 08:44

240313-knhtpaah6810

13/03/2024, 08:44

240313-km8cysha9v10

13/03/2024, 08:43

240313-kms82aah4810

12/03/2024, 18:00

240312-wlevsshe8610

12/03/2024, 17:57

240312-wjxylahe4810

12/03/2024, 17:55

240312-whm21afc7t10

12/03/2024, 17:54

240312-wg7p1sfc5y10

12/03/2024, 17:53

240312-wgg5csfc3y10

12/03/2024, 17:52

240312-wf31fahd5810

Sharing

Copy URL Twitter E-mail

General

  • Target
    testexe.exe
  • Size 40KB
  • Sample240312-wgg5csfc3y
  • SHA256 bdceae0011ef605ed7ba17edd9d550dd9bd580e8b4f69ac7d3bc18ac59e2b8ac
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
xmrigminer

Malware Config

Targets

    • Target
      test - Copy - Copy (2) - Copy - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1
    • Target
      test - Copy - Copy (2) - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral2
    • Target
      test - Copy - Copy (2).exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral3
    • Target
      test - Copy - Copy (3) - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral4
    • Target
      test - Copy - Copy (3).exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral5
    • Target
      test - Copy - Copy (4) - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral6
    • Target
      test - Copy - Copy (4).exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral7
    • Target
      test - Copy - Copy - Copy (2) - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral8
    • Target
      test - Copy - Copy - Copy (2).exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral9
    • Target
      test - Copy - Copy - Copy (3).exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral10
    • Target
      test - Copy - Copy - Copy - Copy (2).exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral11
    • Target
      test - Copy - Copy - Copy - Copy - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral12
    • Target
      test - Copy - Copy - Copy - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral13
    • Target
      test - Copy - Copy - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral14
    • Target
      test - Copy - Copy.exe
    • Size 6KB
    • SHA256 a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral15

MITRE ATT&CK Enterprise v15

Tasks