General

  • Target

    ac709c9248fd99234793789d306bc8f0N.exe

  • Size

    1.7MB

  • Sample

    240817-gawa3szcqa

  • MD5

    ac709c9248fd99234793789d306bc8f0

  • SHA1

    2032c95bb547afc154fc65aad168c87b4fe98778

  • SHA256

    50a18916078921e878dbcd50619a96098a6bfdc1c07f83854c7cd8b20e7c8e5c

  • SHA512

    8987f738d393f10489c4938e3c6f2931125191f560a67442fc9ad9111db9c36abc3a47563d1dbcffad7c13de66239e51a021687b158e3a55c60661e411142e42

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwV0NQhHfP:Lz071uv4BPMkFfdg6NsIRSwVkQP

Malware Config

Targets

    • Target

      ac709c9248fd99234793789d306bc8f0N.exe

    • Size

      1.7MB

    • MD5

      ac709c9248fd99234793789d306bc8f0

    • SHA1

      2032c95bb547afc154fc65aad168c87b4fe98778

    • SHA256

      50a18916078921e878dbcd50619a96098a6bfdc1c07f83854c7cd8b20e7c8e5c

    • SHA512

      8987f738d393f10489c4938e3c6f2931125191f560a67442fc9ad9111db9c36abc3a47563d1dbcffad7c13de66239e51a021687b158e3a55c60661e411142e42

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwV0NQhHfP:Lz071uv4BPMkFfdg6NsIRSwVkQP

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks