General

  • Target

    c72f9db2306bb8066f35941243c3cdd0N.exe

  • Size

    2.4MB

  • Sample

    240831-vc161avcmf

  • MD5

    c72f9db2306bb8066f35941243c3cdd0

  • SHA1

    8bf1b50dec221d4ee298ea7261ef070a94c7ebf0

  • SHA256

    a7c7574f569ad154259eb2031f4db4c18a49811872c5a3960643862e92d2d5cc

  • SHA512

    496ac6337bd369ca86176874ef42ca946ee3056eee130a251a69ddedd5d92b6f4d897ebeef25bef06837c0f20f07de7a40a6357a17c95b8c0cf93c0048b1a693

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIQOYFbewWv/lfRI:oemTLkNdfE0pZrQ/

Malware Config

Targets

    • Target

      c72f9db2306bb8066f35941243c3cdd0N.exe

    • Size

      2.4MB

    • MD5

      c72f9db2306bb8066f35941243c3cdd0

    • SHA1

      8bf1b50dec221d4ee298ea7261ef070a94c7ebf0

    • SHA256

      a7c7574f569ad154259eb2031f4db4c18a49811872c5a3960643862e92d2d5cc

    • SHA512

      496ac6337bd369ca86176874ef42ca946ee3056eee130a251a69ddedd5d92b6f4d897ebeef25bef06837c0f20f07de7a40a6357a17c95b8c0cf93c0048b1a693

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIQOYFbewWv/lfRI:oemTLkNdfE0pZrQ/

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks