Overview

overview

10

Static

static

3

c4ab683fb4...4d.exe

windows7-x64

10

c4ab683fb4...4d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c4ab683fb45be6bdc8ed389e4ba51f4d

  • Size

    329KB

  • Sample

    240313-cap2vahd4s

  • MD5

    c4ab683fb45be6bdc8ed389e4ba51f4d

  • SHA1

    3e2fc935ac614ebd1b59db08f40f52e54fb45671

  • SHA256

    707e0e6e46b10ddbddaa496b1cf36b1217285c804e708ee3287f8c0704b8e6dd

  • SHA512

    f16e14acd1fb9d455e202498f232860948a517dd1673b41bfc23714816bf0cc416f9d4167020eb25e5b75d3b8ebcc3ed4d15e67b9dda1f99967cbadd7e193ccd

  • SSDEEP

    3072:W0NylrNuanGPdHbRKhH8z0+zSz/R+uMGDcyw:W0U5UPd7RKR8z0+zSzpBPDcy

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      c4ab683fb45be6bdc8ed389e4ba51f4d

    • Size

      329KB

    • MD5

      c4ab683fb45be6bdc8ed389e4ba51f4d

    • SHA1

      3e2fc935ac614ebd1b59db08f40f52e54fb45671

    • SHA256

      707e0e6e46b10ddbddaa496b1cf36b1217285c804e708ee3287f8c0704b8e6dd

    • SHA512

      f16e14acd1fb9d455e202498f232860948a517dd1673b41bfc23714816bf0cc416f9d4167020eb25e5b75d3b8ebcc3ed4d15e67b9dda1f99967cbadd7e193ccd

    • SSDEEP

      3072:W0NylrNuanGPdHbRKhH8z0+zSz/R+uMGDcyw:W0U5UPd7RKR8z0+zSzpBPDcy

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks