General

  • Target

    923a41b257e8d6520b02d4c266ae2630N.exe

  • Size

    1.8MB

  • Sample

    240824-qkf4ks1hrg

  • MD5

    923a41b257e8d6520b02d4c266ae2630

  • SHA1

    191c0709618e5f745217327bb7b2f500619cf6a8

  • SHA256

    691b3530b3adf69f0c0049ad99482fe8db44d38058b5a7ccb4c0e82b58f9072e

  • SHA512

    4b0239d06ec50df271542b4268792f3a243680ab1bac09404d6203ce4cdc1638964ed5af387bd8e9c03a8a089fcababb2a9734ae3df59cb2e510a2f92476da48

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VqlC:NAB2

Malware Config

Targets

    • Target

      923a41b257e8d6520b02d4c266ae2630N.exe

    • Size

      1.8MB

    • MD5

      923a41b257e8d6520b02d4c266ae2630

    • SHA1

      191c0709618e5f745217327bb7b2f500619cf6a8

    • SHA256

      691b3530b3adf69f0c0049ad99482fe8db44d38058b5a7ccb4c0e82b58f9072e

    • SHA512

      4b0239d06ec50df271542b4268792f3a243680ab1bac09404d6203ce4cdc1638964ed5af387bd8e9c03a8a089fcababb2a9734ae3df59cb2e510a2f92476da48

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VqlC:NAB2

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks