General

  • Target

    44c1e33d067236dfc4ddc640fbf812faab3f2c7222c4083050f7b8c29ae38522N

  • Size

    1.6MB

  • Sample

    240919-gw9qlavcnk

  • MD5

    bec3396da0969931b4c557015c392450

  • SHA1

    7251583c2ccacccf6d724e81c12e37cefd17432e

  • SHA256

    44c1e33d067236dfc4ddc640fbf812faab3f2c7222c4083050f7b8c29ae38522

  • SHA512

    c0a1073c8710bc0dfd013c30904fe5a169b0a6cb7ee4641f28574e198b6cc8fef86bc5de9effc4c42e6179fec5e17032c9ad898a0c21b2030d87253507160144

  • SSDEEP

    49152:Lz071uv4BPMkyW10/wKV7hjSe5CtAlM22Cwj:NABl

Malware Config

Targets

    • Target

      44c1e33d067236dfc4ddc640fbf812faab3f2c7222c4083050f7b8c29ae38522N

    • Size

      1.6MB

    • MD5

      bec3396da0969931b4c557015c392450

    • SHA1

      7251583c2ccacccf6d724e81c12e37cefd17432e

    • SHA256

      44c1e33d067236dfc4ddc640fbf812faab3f2c7222c4083050f7b8c29ae38522

    • SHA512

      c0a1073c8710bc0dfd013c30904fe5a169b0a6cb7ee4641f28574e198b6cc8fef86bc5de9effc4c42e6179fec5e17032c9ad898a0c21b2030d87253507160144

    • SSDEEP

      49152:Lz071uv4BPMkyW10/wKV7hjSe5CtAlM22Cwj:NABl

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks