General
-
Target
982d61e47dc2c9c3f9c9cc7fc50bf9e0.exe.bin
-
Size
5.2MB
-
Sample
240518-f6qvssdg96
-
MD5
982d61e47dc2c9c3f9c9cc7fc50bf9e0
-
SHA1
cc0de1dbfdd7643f6589eabc603725061c1faf19
-
SHA256
5fbb2cb7007571d847f124f41753be9e71b78a3c815d3daad92ebf05e3f42799
-
SHA512
06a021c155b22cb9b2aeda5b7d61c9bcec45e6869768894ae8e97286dd065ea22e9129b9c1bd3492adc4f3c5bc00a6cec31d2d3b97654b211f7f78af3a5719e1
-
SSDEEP
98304:xRjPz9KDzUU8O5/B/LJ25E9SVh86sS3TRknQ3ss2MApp9meypA3cPDu7:xFKoU8O5/b2XViSjX310SeyGc7u7
Static task
static1
Behavioral task
behavioral1
Sample
982d61e47dc2c9c3f9c9cc7fc50bf9e0.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
982d61e47dc2c9c3f9c9cc7fc50bf9e0.exe.bin
-
Size
5.2MB
-
MD5
982d61e47dc2c9c3f9c9cc7fc50bf9e0
-
SHA1
cc0de1dbfdd7643f6589eabc603725061c1faf19
-
SHA256
5fbb2cb7007571d847f124f41753be9e71b78a3c815d3daad92ebf05e3f42799
-
SHA512
06a021c155b22cb9b2aeda5b7d61c9bcec45e6869768894ae8e97286dd065ea22e9129b9c1bd3492adc4f3c5bc00a6cec31d2d3b97654b211f7f78af3a5719e1
-
SSDEEP
98304:xRjPz9KDzUU8O5/B/LJ25E9SVh86sS3TRknQ3ss2MApp9meypA3cPDu7:xFKoU8O5/b2XViSjX310SeyGc7u7
-
XMRig Miner payload
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Creates new service(s)
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-