General

  • Target

    e9f2c1bf066ba691b543a85501ac0a50N

  • Size

    1.6MB

  • Sample

    240913-kfz31atenj

  • MD5

    e9f2c1bf066ba691b543a85501ac0a50

  • SHA1

    f9a23bab941d81aa4dfb6fbbd6706cc9690dcd6f

  • SHA256

    9a973acadcedb870808cd6357a99853107e26d70d4a65fd388ecde2de3e1ed0d

  • SHA512

    17beda123841920328ccf0fb22c6615d83003034e313d1c5b6e61253ed75ed164f0bbe718ec94815545553d86ad844adabdf4faed319f3044553878f23621933

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwLENt:Lz071uv4BPMkibTIA5CJzn

Malware Config

Targets

    • Target

      e9f2c1bf066ba691b543a85501ac0a50N

    • Size

      1.6MB

    • MD5

      e9f2c1bf066ba691b543a85501ac0a50

    • SHA1

      f9a23bab941d81aa4dfb6fbbd6706cc9690dcd6f

    • SHA256

      9a973acadcedb870808cd6357a99853107e26d70d4a65fd388ecde2de3e1ed0d

    • SHA512

      17beda123841920328ccf0fb22c6615d83003034e313d1c5b6e61253ed75ed164f0bbe718ec94815545553d86ad844adabdf4faed319f3044553878f23621933

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwLENt:Lz071uv4BPMkibTIA5CJzn

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks