Overview

overview

10

Static

static

1

file01 - c...ia.ps1

windows7-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

3

file01 - c...ia.ps1

windows10-2004-x64

10

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

10

file01 - c...ia.ps1

windows7-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows10-1703-x64

10

file01 - c...ia.ps1

windows10-2004-x64

3

file01 - c...ia.ps1

windows11-21h2-x64

3

file01 - c...9).ps1

windows10-2004-x64

3

file01 - c...9).ps1

windows10-1703-x64

10

file01 - c...9).ps1

windows10-2004-x64

3

file01 - c...9).ps1

windows11-21h2-x64

3

Resubmissions

16/06/2024, 07:20 UTC

240616-h6f2psycpm 10

16/06/2024, 07:20 UTC

240616-h6f2psvbka 10

16/06/2024, 07:20 UTC

240616-h6f2psycpl 10

16/06/2024, 07:20 UTC

240616-h6f2psycpk 10

16/06/2024, 07:20 UTC

240616-h6f2psvbjh 10

16/06/2024, 07:20 UTC

240616-h6fqyaycnr 10

16/06/2024, 07:20 UTC

240616-h6fqyaycnq 10

16/06/2024, 07:20 UTC

240616-h6fqyaycnp 10

16/06/2024, 07:20 UTC

240616-h6fqyavbjg 10

16/06/2024, 07:20 UTC

240616-h6fqyaycnn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    main3.rar

  • Size

    3KB

  • Sample

    240616-h6f2psvbka

  • MD5

    881d354daf12f7771b77f8767db535f2

  • SHA1

    eaac1aef5403cedad1c28962de7fd994d2db74d1

  • SHA256

    4989b2b14eed528c576634ce1f8a74caa71ae3c67773a1e7758a6ab6f51f5b88

  • SHA512

    13c5bccfd2becb8b624bc2380b6b8ae6d6b3a47db136586d817cb9d7468ec5ba45ea41ceee7c4d8697e3336bf2d1807e880ccb473ecb6f12dbf57aa09c54e3ec

Score
10/10
xmrigexecutionminer

Malware Config

Targets

    • Target

      file01 - copia (10) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral1behavioral2behavioral3behavioral4

    • Target

      file01 - copia (11) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral5behavioral6behavioral7behavioral8

    • Target

      file01 - copia (12) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    xmrigexecutionminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral10behavioral11behavioral12behavioral9

    • Target

      file01 - copia (13) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral13behavioral14behavioral15behavioral16

    • Target

      file01 - copia (14) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral17behavioral18behavioral19behavioral20

    • Target

      file01 - copia (15) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    xmrigexecutionminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral21behavioral22behavioral23behavioral24

    • Target

      file01 - copia (9) - copia.ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral25behavioral26behavioral27behavioral28

    • Target

      file01 - copia (9).ps1

    • Size

      462B

    • MD5

      5e2dca825bed214a14705357df13d8d6

    • SHA1

      04f20b1094e5e905bcbcdfc0f1279f6a6e2bbb9e

    • SHA256

      b45546367df23b2459a55ffa753ad4d66f8588263f87c339fb81cde87c3ffba4

    • SHA512

      70a31874a475560704829224c71d6e9f01d6dc3bfe5b1f453ff817753f7a6d1ed51249481cd14e8adae497ad6ddfbe8b4e9556556886dd97c9587b24b0701501

    Score
    10/10
    executionxmrigminer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    behavioral29behavioral30behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

execution
Score
3/10

behavioral2

xmrigexecutionminer
Score
10/10

behavioral3

execution
Score
3/10

behavioral4

xmrigexecutionminer
Score
10/10

behavioral5

execution
Score
3/10

behavioral6

xmrigexecutionminer
Score
10/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

xmrigexecutionminer
Score
10/10

behavioral10

xmrigexecutionminer
Score
10/10

behavioral11

execution
Score
3/10

behavioral12

xmrigexecutionminer
Score
10/10

behavioral13

execution
Score
3/10

behavioral14

xmrigexecutionminer
Score
10/10

behavioral15

execution
Score
3/10

behavioral16

xmrigexecutionminer
Score
10/10

behavioral17

execution
Score
3/10

behavioral18

xmrigexecutionminer
Score
10/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

xmrigexecutionminer
Score
10/10

behavioral22

xmrigexecutionminer
Score
10/10

behavioral23

execution
Score
3/10

behavioral24

xmrigexecutionminer
Score
10/10

behavioral25

execution
Score
3/10

behavioral26

xmrigexecutionminer
Score
10/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

xmrigexecutionminer
Score
10/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.