xmrig

Resubmissions

17/04/2024, 11:57

240417-n4jygadh8810

17/04/2024, 11:56

17/04/2024, 11:56

17/04/2024, 11:56

17/04/2024, 11:56

17/04/2024, 06:22

Sharing

Copy URL Twitter E-mail

General

Target
a3d0d874700f493debbcd3515ba28645deb565004121c6f5643502863c122355
Size 16.0MB
Sample240417-n4bbbsdh82
SHA256 a3d0d874700f493debbcd3515ba28645deb565004121c6f5643502863c122355
MD5 a9d06dafb91f15c755391bd9d8360f40
SHA1 a261feb9c781965e5598f9a1ea5fbbc140fc270b
SHA512 7b6252b2779aaaecc1f0f10ecd7725e1c35c257bdf62edc689546559649d94c97b319ccf62f23a068fb07a51a9d96688093385de610c4c98495d64f2c6845da4
SSDEEP 393216:CYkuJyJxES3GqYpKjJxDJ9l4aVjod/ImJcplaF5LASRYTWKGw:9s33YcjXDCEjodSl053Y0w
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xmrig miner

Malware Config

Targets

- Target
  a3d0d874700f493debbcd3515ba28645deb565004121c6f5643502863c122355
- Size 16.0MB
- SHA256 a3d0d874700f493debbcd3515ba28645deb565004121c6f5643502863c122355
- MD5 a9d06dafb91f15c755391bd9d8360f40
- SHA1 a261feb9c781965e5598f9a1ea5fbbc140fc270b
- SHA512 7b6252b2779aaaecc1f0f10ecd7725e1c35c257bdf62edc689546559649d94c97b319ccf62f23a068fb07a51a9d96688093385de610c4c98495d64f2c6845da4
- SSDEEP 393216:CYkuJyJxES3GqYpKjJxDJ9l4aVjod/ImJcplaF5LASRYTWKGw:9s33YcjXDCEjodSl053Y0w
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

xmrig miner
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Suspicious use of SetThreadContext
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Persistence

Scheduled Task/Job

T1053

Privilege Escalation

Scheduled Task/Job

T1053

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

XMRig Miner payload

Checks computer location settings

Deletes itself

Executes dropped EXE

Loads dropped DLL

AutoIT Executable

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5