General

  • Target

    ___

  • Size

    6.7MB

  • Sample

    240328-hyr41ach36

  • MD5

    73fd05d9d3fe27957fff3b176f0ab6e9

  • SHA1

    ab6a50a4baabc319d52d8d5dd8f7b099db884aa0

  • SHA256

    c7de9799873b353f2fec6a490ed1d4062340eddda623afa0ba8798aca7ced31d

  • SHA512

    07c9387e4cfb186dcff9234b38a5ef4bc63598200c2e0dee1dfff79d87cd0b52721f6aafe0848265ff96eb908ff7ccb66d13bdfde010ffb4fbeee079d006a926

  • SSDEEP

    196608:nm3gGspZ1DUTzjIOWBwYPyF95i4Gu5tX9Wj:nm36mtX9Wj

Malware Config

Targets

    • Target

      ___

    • Size

      6.7MB

    • MD5

      73fd05d9d3fe27957fff3b176f0ab6e9

    • SHA1

      ab6a50a4baabc319d52d8d5dd8f7b099db884aa0

    • SHA256

      c7de9799873b353f2fec6a490ed1d4062340eddda623afa0ba8798aca7ced31d

    • SHA512

      07c9387e4cfb186dcff9234b38a5ef4bc63598200c2e0dee1dfff79d87cd0b52721f6aafe0848265ff96eb908ff7ccb66d13bdfde010ffb4fbeee079d006a926

    • SSDEEP

      196608:nm3gGspZ1DUTzjIOWBwYPyF95i4Gu5tX9Wj:nm36mtX9Wj

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Reads CPU attributes

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

2
T1497

Discovery

Virtualization/Sandbox Evasion

2
T1497

System Information Discovery

3
T1082

Tasks