Overview

overview

10

Static

static

3

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...2).exe

windows10-2004-x64

7

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...3).exe

windows10-2004-x64

10

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...4).exe

windows10-2004-x64

7

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...2).exe

windows10-2004-x64

7

test - Cop...3).exe

windows10-2004-x64

10

test - Cop...2).exe

windows10-2004-x64

10

test - Cop...py.exe

windows10-2004-x64

10

test - Cop...py.exe

windows10-2004-x64

7

test - Cop...py.exe

windows10-2004-x64

7

test - Cop...py.exe

windows10-2004-x64

7

Resubmissions

13-03-2024 08:45

240313-knsznahb2w 10

13-03-2024 08:44

240313-knhtpaah68 10

13-03-2024 08:44

240313-km8cysha9v 10

13-03-2024 08:43

240313-kms82aah48 10

12-03-2024 18:00

240312-wlevsshe86 10

12-03-2024 17:57

240312-wjxylahe48 10

12-03-2024 17:55

240312-whm21afc7t 10

12-03-2024 17:54

240312-wg7p1sfc5y 10

12-03-2024 17:53

240312-wgg5csfc3y 10

12-03-2024 17:52

240312-wf31fahd58 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    testexe.exe

  • Size

    40KB

  • Sample

    240312-wgg5csfc3y

  • MD5

    14f7e13c5ba2fb63eb00de2e4cdacc8e

  • SHA1

    e77147eb8c2306b4dd3841f33d41b76c77310ebc

  • SHA256

    bdceae0011ef605ed7ba17edd9d550dd9bd580e8b4f69ac7d3bc18ac59e2b8ac

  • SHA512

    9f6ee0f08b29b3a5448bd0cf0ffc90e98cc890445234971f05e4785a1622aebd891ca132ca4f18c0a2c9d26fc9d4d60d29843cdec904c00817ca5991e04d0e50

  • SSDEEP

    768:b5nXn5nXA5nXM5nXJ5nXY25nXZ85nXo5nXR5nXo5nXa5nXC5nX75nXI5nX95nXUz:bpnpApMpJpRpKpopRpopapCp7pIp9pm

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      test - Copy - Copy (2) - Copy - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

    • Target

      test - Copy - Copy (2) - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral2

    • Target

      test - Copy - Copy (2).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral3

    • Target

      test - Copy - Copy (3) - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral4

    • Target

      test - Copy - Copy (3).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral5

    • Target

      test - Copy - Copy (4) - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral6

    • Target

      test - Copy - Copy (4).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral7

    • Target

      test - Copy - Copy - Copy (2) - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral8

    • Target

      test - Copy - Copy - Copy (2).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral9

    • Target

      test - Copy - Copy - Copy (3).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral10

    • Target

      test - Copy - Copy - Copy - Copy (2).exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral11

    • Target

      test - Copy - Copy - Copy - Copy - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    10/10
    xmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral12

    • Target

      test - Copy - Copy - Copy - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral13

    • Target

      test - Copy - Copy - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral14

    • Target

      test - Copy - Copy.exe

    • Size

      6KB

    • MD5

      4634098fe194204dc03f967cc0b19cd6

    • SHA1

      eaa58619c6cea9f148cec61ee504cd727b3e80d8

    • SHA256

      a1070b8803e4243699a44a77e60a199282814495bc3bd94759c07021c0a6c70c

    • SHA512

      64e97fac56a25daf99f8ee1a9f480acc8020d5da4eb96ea77022c9170f6300b7b5479fce86e3e7e088cdaabdf123b65872e09b0ae17f8f97ea2fe58b6ecf7a9d

    • SSDEEP

      96:2Fb158Vgo4CVvAXklfZT8kYl9RxxgAVNb8ICcGKzNt:oMV1vAX+8kYDRxbLh4s

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral15

MITRE ATT&CK Enterprise v15

Tasks