General

  • Target

    95d6d771be8d5948f06ea84d593fda50N.exe

  • Size

    2.2MB

  • Sample

    240807-kq3lwawbpn

  • MD5

    95d6d771be8d5948f06ea84d593fda50

  • SHA1

    9cd4a0be17da9ff0c255f84128c1187ca76d3998

  • SHA256

    4c181cc5578bd605ec3f6a8bb8411719382ef0c015af33f664eb5563374b4477

  • SHA512

    9e7aca722aac62ec3c5b9bfe7b65d35ecde0666ca4718af7f683165261e9bbfef9f99e3b8ea419879149353d193d23987cc78325d2dbd116ecccc9f7499c2db6

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleu3:NABp

Malware Config

Targets

    • Target

      95d6d771be8d5948f06ea84d593fda50N.exe

    • Size

      2.2MB

    • MD5

      95d6d771be8d5948f06ea84d593fda50

    • SHA1

      9cd4a0be17da9ff0c255f84128c1187ca76d3998

    • SHA256

      4c181cc5578bd605ec3f6a8bb8411719382ef0c015af33f664eb5563374b4477

    • SHA512

      9e7aca722aac62ec3c5b9bfe7b65d35ecde0666ca4718af7f683165261e9bbfef9f99e3b8ea419879149353d193d23987cc78325d2dbd116ecccc9f7499c2db6

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleu3:NABp

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks