Overview

overview

10

Static

static

3

miner100.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    miner100.exe

  • Size

    2.7MB

  • Sample

    240329-cjex8seh3s

  • MD5

    eae2347aaed97da4f802c0b32689f4eb

  • SHA1

    a7a83d1ff7ec22d74d8415b95b3d57f1323699ce

  • SHA256

    3d403e5661dd33a3e3e33585ce28384fde2f9d0d3e128ad5b46da1bec36ba0f4

  • SHA512

    65f3411a7e80ec6d1dfea40d644ca621f4de929d17e58a54e43030b58662fedba11f000928049b4d3d7ae6ec38003d62dd8109c330ceba588be96f598b35d7cd

  • SSDEEP

    49152:+Ev7yMxM0ZzUjqhWBkZFOj3nscD6gLRZdjM0PcuzQ3zAlkVKd:+EvWMxHUjqPPOjXsngLjdjBPz+3

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      miner100.exe

    • Size

      2.7MB

    • MD5

      eae2347aaed97da4f802c0b32689f4eb

    • SHA1

      a7a83d1ff7ec22d74d8415b95b3d57f1323699ce

    • SHA256

      3d403e5661dd33a3e3e33585ce28384fde2f9d0d3e128ad5b46da1bec36ba0f4

    • SHA512

      65f3411a7e80ec6d1dfea40d644ca621f4de929d17e58a54e43030b58662fedba11f000928049b4d3d7ae6ec38003d62dd8109c330ceba588be96f598b35d7cd

    • SSDEEP

      49152:+Ev7yMxM0ZzUjqhWBkZFOj3nscD6gLRZdjM0PcuzQ3zAlkVKd:+EvWMxHUjqPPOjXsngLjdjBPz+3

    Score
    10/10
    evasionpersistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Creates new service(s)

      persistence

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks