Overview

overview

10

Static

static

1

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

10

file01 - c...ia.ps1

windows11-21h2-x64

3

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

10

file01 - c...ia.ps1

windows11-21h2-x64

3

file01 - c...ia.ps1

windows7-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

10

file01 - c...ia.ps1

windows11-21h2-x64

3

file01 - c...ia.ps1

windows10-2004-x64

10

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

10

file01 - c...ia.ps1

windows11-21h2-x64

3

file01 - c...ia.ps1

windows7-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

10

file01 - c...ia.ps1

windows11-21h2-x64

10

file01 - c...9).ps1

windows7-x64

3

file01 - c...9).ps1

windows10-1703-x64

10

file01 - c...9).ps1

windows10-2004-x64

10

file01 - c...9).ps1

windows11-21h2-x64

10

Resubmissions

16-06-2024 07:20

240616-h6f2psycpm 10

16-06-2024 07:20

240616-h6f2psvbka 10

16-06-2024 07:20

240616-h6f2psycpl 10

16-06-2024 07:20

240616-h6f2psycpk 10

16-06-2024 07:20

240616-h6f2psvbjh 10

16-06-2024 07:20

240616-h6fqyaycnr 10

16-06-2024 07:20

240616-h6fqyaycnq 10

16-06-2024 07:20

240616-h6fqyaycnp 10

16-06-2024 07:20

240616-h6fqyavbjg 10

16-06-2024 07:20

240616-h6fqyaycnn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    main3.rar

  • Size

    3KB

  • Sample

    240611-cw7h1s1fnr

  • MD5

    881d354daf12f7771b77f8767db535f2

  • SHA1

    eaac1aef5403cedad1c28962de7fd994d2db74d1

  • SHA256

    4989b2b14eed528c576634ce1f8a74caa71ae3c67773a1e7758a6ab6f51f5b88

  • SHA512

    13c5bccfd2becb8b624bc2380b6b8ae6d6b3a47db136586d817cb9d7468ec5ba45ea41ceee7c4d8697e3336bf2d1807e880ccb473ecb6f12dbf57aa09c54e3ec

Score
10/10
xmrigexecutionminer

Malware Config

Targets

    • Target

      file01 - copia (10) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral1behavioral2behavioral3behavioral4

    • Target

      file01 - copia (11) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral5behavioral6behavioral7behavioral8

    • Target

      file01 - copia (12) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    xmrigexecutionminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral10behavioral11behavioral12behavioral9

    • Target

      file01 - copia (13) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    xmrigexecutionminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral13behavioral14behavioral15behavioral16

    • Target

      file01 - copia (14) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral17behavioral18behavioral19behavioral20

    • Target

      file01 - copia (15) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    xmrigexecutionminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral21behavioral22behavioral23behavioral24

    • Target

      file01 - copia (9) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral25behavioral26behavioral27behavioral28

    • Target

      file01 - copia (9).ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral29behavioral30behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

execution
Score
3/10

behavioral2

xmrigexecutionminer
Score
10/10

behavioral3

xmrigexecutionminer
Score
10/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

xmrigexecutionminer
Score
10/10

behavioral7

xmrigexecutionminer
Score
10/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

xmrigexecutionminer
Score
10/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

xmrigexecutionminer
Score
10/10

behavioral14

xmrigexecutionminer
Score
10/10

behavioral15

execution
Score
3/10

behavioral16

xmrigexecutionminer
Score
10/10

behavioral17

execution
Score
3/10

behavioral18

xmrigexecutionminer
Score
10/10

behavioral19

xmrigexecutionminer
Score
10/10

behavioral20

execution
Score
3/10

behavioral21

xmrigexecutionminer
Score
10/10

behavioral22

xmrigexecutionminer
Score
10/10

behavioral23

xmrigexecutionminer
Score
10/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

xmrigexecutionminer
Score
10/10

behavioral27

xmrigexecutionminer
Score
10/10

behavioral28

xmrigexecutionminer
Score
10/10

behavioral29

execution
Score
3/10

behavioral30

xmrigexecutionminer
Score
10/10

behavioral31

xmrigexecutionminer
Score
10/10

behavioral32

xmrigexecutionminer
Score
10/10