General

  • Target

    46eb47212d07d337d4881e39ae3a4410N.exe

  • Size

    2.0MB

  • Sample

    240817-nlhmpashkh

  • MD5

    46eb47212d07d337d4881e39ae3a4410

  • SHA1

    962e57760905069955ce626ef1166da5604f7dbe

  • SHA256

    f5cdd33518a5041e61e92611266089941f14205eaf737c9bb3e91193f6eaf5d7

  • SHA512

    0a374aab3d89c1589fa19e2e00d232d2c6f51c7644fbb30893cdfcc62c7d8e9bc0e50e1ed45d99adab7bdb31b10675aed98e1c57b0d968b2d06557e6f5d5a34b

  • SSDEEP

    49152:Lz071uv4BPMkFfdk2a2yKmkfHb/E9bwQj:NAB0

Malware Config

Targets

    • Target

      46eb47212d07d337d4881e39ae3a4410N.exe

    • Size

      2.0MB

    • MD5

      46eb47212d07d337d4881e39ae3a4410

    • SHA1

      962e57760905069955ce626ef1166da5604f7dbe

    • SHA256

      f5cdd33518a5041e61e92611266089941f14205eaf737c9bb3e91193f6eaf5d7

    • SHA512

      0a374aab3d89c1589fa19e2e00d232d2c6f51c7644fbb30893cdfcc62c7d8e9bc0e50e1ed45d99adab7bdb31b10675aed98e1c57b0d968b2d06557e6f5d5a34b

    • SSDEEP

      49152:Lz071uv4BPMkFfdk2a2yKmkfHb/E9bwQj:NAB0

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks