General

  • Target

    2cf24966a6aad7b6ecffe04a20eaf3dd.exe

  • Size

    9.0MB

  • Sample

    240614-rzpvpsvcnh

  • MD5

    2cf24966a6aad7b6ecffe04a20eaf3dd

  • SHA1

    e50a4184953faeec7e40bb33f52c08d7f22a2519

  • SHA256

    01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719

  • SHA512

    5e4eda6d61438e46c5e93b994dcda0cddcb24a0f19529605715f74c91a9ad0cf30fd592aba8111d2aaae8c340f6b2860564f6b35e871df3f362afb48aea094f1

  • SSDEEP

    196608:rhHMBGC3PtXtT+Was8owq1wo9JoYx5JAMdJOnZTG1IvQSaKe6NZOn:r2G0RwuwasMdJOnZKVSaaNZOn

Malware Config

Targets

    • Target

      2cf24966a6aad7b6ecffe04a20eaf3dd.exe

    • Size

      9.0MB

    • MD5

      2cf24966a6aad7b6ecffe04a20eaf3dd

    • SHA1

      e50a4184953faeec7e40bb33f52c08d7f22a2519

    • SHA256

      01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719

    • SHA512

      5e4eda6d61438e46c5e93b994dcda0cddcb24a0f19529605715f74c91a9ad0cf30fd592aba8111d2aaae8c340f6b2860564f6b35e871df3f362afb48aea094f1

    • SSDEEP

      196608:rhHMBGC3PtXtT+Was8owq1wo9JoYx5JAMdJOnZTG1IvQSaKe6NZOn:r2G0RwuwasMdJOnZKVSaaNZOn

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks