General

  • Target

    eee49d11166b442744d1768588103630N.exe

  • Size

    1.3MB

  • Sample

    240824-f8lnvsxcnn

  • MD5

    eee49d11166b442744d1768588103630

  • SHA1

    a4f8003f1b1294d480241be8b055fb58c362edea

  • SHA256

    d6d98851f0629f00410690aacf8eb869f80e982ea4ac7dc4aa0e55241d8ef056

  • SHA512

    4d5025df3154659f1e2826669b6fdfa96ded82eb35b7dd80eb01fec250cd0bbc559a8927100eec91578a0d9160acb6ae312dc9bde4bf73dc5a9a0a0ddb47b265

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYUA/02aHwaQY55T:Lz071uv4BPMkibTIA5UMvg

Malware Config

Targets

    • Target

      eee49d11166b442744d1768588103630N.exe

    • Size

      1.3MB

    • MD5

      eee49d11166b442744d1768588103630

    • SHA1

      a4f8003f1b1294d480241be8b055fb58c362edea

    • SHA256

      d6d98851f0629f00410690aacf8eb869f80e982ea4ac7dc4aa0e55241d8ef056

    • SHA512

      4d5025df3154659f1e2826669b6fdfa96ded82eb35b7dd80eb01fec250cd0bbc559a8927100eec91578a0d9160acb6ae312dc9bde4bf73dc5a9a0a0ddb47b265

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYUA/02aHwaQY55T:Lz071uv4BPMkibTIA5UMvg

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks