General

  • Target

    133f5f83cedc22d37fb5a33013a02c60N.exe

  • Size

    2.2MB

  • Sample

    240721-1bs2wsxgmj

  • MD5

    133f5f83cedc22d37fb5a33013a02c60

  • SHA1

    02c2fe8a97794fde2a57918d786f38ef72691aad

  • SHA256

    eb8fec182248d976453d60d71ec78f9c5082c5e419611184b7bb62f603907cf5

  • SHA512

    8334ad90e8d6e729ce4c5a910c75e75facb23e2a17666bdd3dabccce32480f5f1e0e77495354fede5c50b5b821a99785c0ba90c5ed2913cf14d393062efe04a7

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrUIP:NABO

Malware Config

Targets

    • Target

      133f5f83cedc22d37fb5a33013a02c60N.exe

    • Size

      2.2MB

    • MD5

      133f5f83cedc22d37fb5a33013a02c60

    • SHA1

      02c2fe8a97794fde2a57918d786f38ef72691aad

    • SHA256

      eb8fec182248d976453d60d71ec78f9c5082c5e419611184b7bb62f603907cf5

    • SHA512

      8334ad90e8d6e729ce4c5a910c75e75facb23e2a17666bdd3dabccce32480f5f1e0e77495354fede5c50b5b821a99785c0ba90c5ed2913cf14d393062efe04a7

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrUIP:NABO

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks