General

  • Target

    370c91497831941448332a7cf5f81710_NEAS

  • Size

    1.5MB

  • Sample

    240507-l5vegsbf3v

  • MD5

    370c91497831941448332a7cf5f81710

  • SHA1

    713cbd60b9debbb329cdafe0f0b077f90e951095

  • SHA256

    9aa9d49dcaf038e143ad2556d49edf05f6657be3a5d2da7ebdf037ffd1f6e22a

  • SHA512

    7a9bf36b6a493beaea54a4d5ecf76c1ca91ef4264ebbc609732baedf8bd06b38a84cad096fbc1022b7af3688ea1d72dccba02205efbac89317ed440f4f1408ba

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNIjTd7mC5p7:Lz071uv4BPMkFfdk2auTxD

Malware Config

Targets

    • Target

      370c91497831941448332a7cf5f81710_NEAS

    • Size

      1.5MB

    • MD5

      370c91497831941448332a7cf5f81710

    • SHA1

      713cbd60b9debbb329cdafe0f0b077f90e951095

    • SHA256

      9aa9d49dcaf038e143ad2556d49edf05f6657be3a5d2da7ebdf037ffd1f6e22a

    • SHA512

      7a9bf36b6a493beaea54a4d5ecf76c1ca91ef4264ebbc609732baedf8bd06b38a84cad096fbc1022b7af3688ea1d72dccba02205efbac89317ed440f4f1408ba

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMGvGr1t4oAirbNIjTd7mC5p7:Lz071uv4BPMkFfdk2auTxD

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks