General

  • Target

    20d5968a079fb744afae49221cf33e80N

  • Size

    2.0MB

  • Sample

    240908-h7ng6svhnc

  • MD5

    20d5968a079fb744afae49221cf33e80

  • SHA1

    0d8c600d562826d27d0b5f7a5451690ef4d791b0

  • SHA256

    90b5b00f8103a60a9aa51934e085c828ee0fa5415974acb2c4624292e7953a15

  • SHA512

    e0738eb03c0fc3a03a422b948d203251a83300bf1e4c9ee9b58b610b00ce09a743df9322c9d148539ac3c34688b5af5934474ed3776d9953231c52bdc4ce61bd

  • SSDEEP

    49152:Lz071uv4BPMkHC0IEFTo/abRcN91M+Ayf:NABg

Malware Config

Targets

    • Target

      20d5968a079fb744afae49221cf33e80N

    • Size

      2.0MB

    • MD5

      20d5968a079fb744afae49221cf33e80

    • SHA1

      0d8c600d562826d27d0b5f7a5451690ef4d791b0

    • SHA256

      90b5b00f8103a60a9aa51934e085c828ee0fa5415974acb2c4624292e7953a15

    • SHA512

      e0738eb03c0fc3a03a422b948d203251a83300bf1e4c9ee9b58b610b00ce09a743df9322c9d148539ac3c34688b5af5934474ed3776d9953231c52bdc4ce61bd

    • SSDEEP

      49152:Lz071uv4BPMkHC0IEFTo/abRcN91M+Ayf:NABg

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks