General

  • Target

    9fc0e2cb5e799c7b85583f6000887640N.exe

  • Size

    2.4MB

  • Sample

    240806-n4mpcssdmf

  • MD5

    9fc0e2cb5e799c7b85583f6000887640

  • SHA1

    3da5ea0b89b3de66ec978a5b7b155a94070ff036

  • SHA256

    faa37a5596f222ae5487b9c5bdf28dfedb0dafc27fee8b0c59afd95fffec8d6e

  • SHA512

    14f90b4a8eba6fef068aaeb6f0dda2d18c8ac32b9c002e1c47c5f96a0df4828f02212eda7650672ee32a0eb8e8f68300bca29e165b9c08de6c59f45c6dac32df

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafMzlG:NABA

Malware Config

Targets

    • Target

      9fc0e2cb5e799c7b85583f6000887640N.exe

    • Size

      2.4MB

    • MD5

      9fc0e2cb5e799c7b85583f6000887640

    • SHA1

      3da5ea0b89b3de66ec978a5b7b155a94070ff036

    • SHA256

      faa37a5596f222ae5487b9c5bdf28dfedb0dafc27fee8b0c59afd95fffec8d6e

    • SHA512

      14f90b4a8eba6fef068aaeb6f0dda2d18c8ac32b9c002e1c47c5f96a0df4828f02212eda7650672ee32a0eb8e8f68300bca29e165b9c08de6c59f45c6dac32df

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafMzlG:NABA

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks