Resubmissions

22-04-2024 21:46

240422-1mlrysgg9w 10

22-04-2024 21:45

240422-1mblzsgg9s 10

General

  • Target

    Final.exe

  • Size

    12.5MB

  • Sample

    240422-1mblzsgg9s

  • MD5

    3d30cc33bc230bd6d694f40c3bb825a8

  • SHA1

    31edf37778986b26d33f65eae7e5b6b2a9a19024

  • SHA256

    3e0ae7a114a5707d81e9ef20289d41f69281038b8d8eb3c4f786b86507075eb7

  • SHA512

    5d2f5994ad20d7b342956efcdab718c1fc291b153a9b22d2ce511c4a2b8a828207ac70690698fa7d83a3273dd7404cafadc7f8c83ae8ab4f863184ed1cdc77fa

  • SSDEEP

    393216:WludQdF3MnG3hFTuQmz2QwMCht9/Zy3A4YgyrDFhf:WludQ73MGxtuB2QxCh3xy3wRf

Score
10/10

Malware Config

Targets

    • Target

      Final.exe

    • Size

      12.5MB

    • MD5

      3d30cc33bc230bd6d694f40c3bb825a8

    • SHA1

      31edf37778986b26d33f65eae7e5b6b2a9a19024

    • SHA256

      3e0ae7a114a5707d81e9ef20289d41f69281038b8d8eb3c4f786b86507075eb7

    • SHA512

      5d2f5994ad20d7b342956efcdab718c1fc291b153a9b22d2ce511c4a2b8a828207ac70690698fa7d83a3273dd7404cafadc7f8c83ae8ab4f863184ed1cdc77fa

    • SSDEEP

      393216:WludQdF3MnG3hFTuQmz2QwMCht9/Zy3A4YgyrDFhf:WludQ73MGxtuB2QxCh3xy3wRf

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks