Overview

overview

10

Static

static

3

ForceOP.exe

windows7-x64

1

ForceOP.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ForceOP.exe

  • Size

    35.2MB

  • Sample

    240818-vtghxsxhkk

  • MD5

    701acb492914a27edd4985aa1a65879a

  • SHA1

    d354180fccbaf877a24aa542adad1edfbc2e6d63

  • SHA256

    f1533c81040a0ac5e79d6efd203a03468991aa836fdedcac282ea43a23d653ce

  • SHA512

    38e35846244c38b4b4b9910789848c92215dbe2a869fbe4fcb3060ac2ad67dee9a8da729f19448524ad6020eaf3345c3c1973b9555763f08a4613cefb4824556

  • SSDEEP

    393216:d76L6otUitqtH7wHtXq2pt2jbOCacCFIK0fpP9HF4VW8yfdnVQx4urYsANulL7NJ:d0LoCOn+2ds4urYDNulLBiucS

Score
10/10
xmrigminerspywarestealer

Malware Config

Targets

    • Target

      ForceOP.exe

    • Size

      35.2MB

    • MD5

      701acb492914a27edd4985aa1a65879a

    • SHA1

      d354180fccbaf877a24aa542adad1edfbc2e6d63

    • SHA256

      f1533c81040a0ac5e79d6efd203a03468991aa836fdedcac282ea43a23d653ce

    • SHA512

      38e35846244c38b4b4b9910789848c92215dbe2a869fbe4fcb3060ac2ad67dee9a8da729f19448524ad6020eaf3345c3c1973b9555763f08a4613cefb4824556

    • SSDEEP

      393216:d76L6otUitqtH7wHtXq2pt2jbOCacCFIK0fpP9HF4VW8yfdnVQx4urYsANulL7NJ:d0LoCOn+2ds4urYDNulLBiucS

    Score
    10/10
    xmrigminerspywarestealer

    • XMRig Miner payload

      miner

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks