General
- Target 590d3088ed566cb3d85d48f4914cc657ee49b7d33e85c72167e7c72d81d4cb6c
- Size 9.0MB
- Sample240614-pd66ratfmm
- SHA256 590d3088ed566cb3d85d48f4914cc657ee49b7d33e85c72167e7c72d81d4cb6c
- MD5 5315d928cff19507f66d59b174280e8a
- SHA1 bb3575b84cd7d9270abf0811b07efff4f12c4370
- SHA512 a58b253f5bb399eef044a790ab22256e31d2e144ee2bd87f678c176fb0e983925f7bbd49923d4dd9aeddd0bc7e70c4eb4eac902f90aefa21f4a2f0c1f70174bb
- SSDEEP 196608:rhHMBGC3PtXtT+Was86wq1wo9JoYx5JAMdJOnZTG1IvQSaKe6NZOn:r2G07wuwasMdJOnZKVSaaNZOn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
590d3088ed566cb3d85d48f4914cc657ee49b7d33e85c72167e7c72d81d4cb6c.exe
Resource
win10v2004-20240508-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
590d3088ed566cb3d85d48f4914cc657ee49b7d33e85c72167e7c72d81d4cb6c.exe
Resource
win11-20240611-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 590d3088ed566cb3d85d48f4914cc657ee49b7d33e85c72167e7c72d81d4cb6c
- Size 9.0MB
- SHA256 590d3088ed566cb3d85d48f4914cc657ee49b7d33e85c72167e7c72d81d4cb6c
- MD5 5315d928cff19507f66d59b174280e8a
- SHA1 bb3575b84cd7d9270abf0811b07efff4f12c4370
- SHA512 a58b253f5bb399eef044a790ab22256e31d2e144ee2bd87f678c176fb0e983925f7bbd49923d4dd9aeddd0bc7e70c4eb4eac902f90aefa21f4a2f0c1f70174bb
- SSDEEP 196608:rhHMBGC3PtXtT+Was86wq1wo9JoYx5JAMdJOnZTG1IvQSaKe6NZOn:r2G07wuwasMdJOnZKVSaaNZOn
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1