General

  • Target

    237bcb23ff6061e34e6069e96b623c30N.exe

  • Size

    1.5MB

  • Sample

    240818-e28dlsvgqe

  • MD5

    237bcb23ff6061e34e6069e96b623c30

  • SHA1

    55d4d40eefe23e5407fbeb7b42bdf90893afdc0c

  • SHA256

    78f89d9dfac053521633956e81c49a4ce69bf7d392a4004441cedbebd15166a9

  • SHA512

    d81df59b8eb4c67e2edb65e626e47e536c5ffa27e30361555add16f1eedc4339f65e9668d99cf4c70ba831e76aae67ffd8b45fa824d63c45f980eb752270b327

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkipBh8tGxHIBWGlTqTmo6OZXbPbPIMUQzdXMKAh:Lz071uv4BPMkiFGlvETbzWh

Malware Config

Targets

    • Target

      237bcb23ff6061e34e6069e96b623c30N.exe

    • Size

      1.5MB

    • MD5

      237bcb23ff6061e34e6069e96b623c30

    • SHA1

      55d4d40eefe23e5407fbeb7b42bdf90893afdc0c

    • SHA256

      78f89d9dfac053521633956e81c49a4ce69bf7d392a4004441cedbebd15166a9

    • SHA512

      d81df59b8eb4c67e2edb65e626e47e536c5ffa27e30361555add16f1eedc4339f65e9668d99cf4c70ba831e76aae67ffd8b45fa824d63c45f980eb752270b327

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkipBh8tGxHIBWGlTqTmo6OZXbPbPIMUQzdXMKAh:Lz071uv4BPMkiFGlvETbzWh

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks