General

  • Target

    bbcd113629aa0992d714e94019b66c60N.exe

  • Size

    1.3MB

  • Sample

    240821-cygelszbqk

  • MD5

    bbcd113629aa0992d714e94019b66c60

  • SHA1

    0995805dbd593880f6ec4e335f9e0764456ba5d8

  • SHA256

    ed7b84f8ee64595e8d7af44da857eaf40e131fd1bddb6fdef72223a6027a5ffb

  • SHA512

    78aeece50a149bf6bf2864217ce905cc97d172324e34f931f59f316dd72032b444775e233de6907db8ef687bbbf0356b24a9cea150023038a573d3b2b5f0528e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ2nywSUHNDcyZU:Lz071uv4BPMkibTIA5JnIyKNNU

Malware Config

Targets

    • Target

      bbcd113629aa0992d714e94019b66c60N.exe

    • Size

      1.3MB

    • MD5

      bbcd113629aa0992d714e94019b66c60

    • SHA1

      0995805dbd593880f6ec4e335f9e0764456ba5d8

    • SHA256

      ed7b84f8ee64595e8d7af44da857eaf40e131fd1bddb6fdef72223a6027a5ffb

    • SHA512

      78aeece50a149bf6bf2864217ce905cc97d172324e34f931f59f316dd72032b444775e233de6907db8ef687bbbf0356b24a9cea150023038a573d3b2b5f0528e

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ2nywSUHNDcyZU:Lz071uv4BPMkibTIA5JnIyKNNU

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks