General

  • Target

    c8f936101c73ab575fc23509da09a250N.exe

  • Size

    1.7MB

  • Sample

    240823-ac94paxcmq

  • MD5

    c8f936101c73ab575fc23509da09a250

  • SHA1

    4cc5b3a6e8b0694bb2744a7708c0df7933418a99

  • SHA256

    6434db06bdd96b933543bbf32c9fc5123ee7485be250eecc17a1de6588d97626

  • SHA512

    1028ac9f1ca19897f70b520001929abf9490929d109e3aecc39dffa9cd5fb61e1f35cf421e5f9aee407e7239a64beacb29edaa7d424173f0c3616d260ac57272

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwV0NQhcDa:Lz071uv4BPMkFfdg6NsIRSwVkxDa

Malware Config

Targets

    • Target

      c8f936101c73ab575fc23509da09a250N.exe

    • Size

      1.7MB

    • MD5

      c8f936101c73ab575fc23509da09a250

    • SHA1

      4cc5b3a6e8b0694bb2744a7708c0df7933418a99

    • SHA256

      6434db06bdd96b933543bbf32c9fc5123ee7485be250eecc17a1de6588d97626

    • SHA512

      1028ac9f1ca19897f70b520001929abf9490929d109e3aecc39dffa9cd5fb61e1f35cf421e5f9aee407e7239a64beacb29edaa7d424173f0c3616d260ac57272

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwV0NQhcDa:Lz071uv4BPMkFfdg6NsIRSwVkxDa

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks