Overview
overview
10Static
static
10TEST POP/S...ro.bat
windows10-1703-x64
10TEST POP/S...ro.bat
windows10-2004-x64
10TEST POP/S...ro.bat
windows11-21h2-x64
10TEST POP/S...um.bat
windows10-1703-x64
10TEST POP/S...um.bat
windows10-2004-x64
10TEST POP/S...um.bat
windows11-21h2-x64
10TEST POP/S...yr.bat
windows10-1703-x64
10TEST POP/S...yr.bat
windows10-2004-x64
10TEST POP/S...yr.bat
windows11-21h2-x64
10TEST POP/W...64.sys
windows10-1703-x64
1TEST POP/W...64.sys
windows10-2004-x64
TEST POP/W...64.sys
windows11-21h2-x64
1TEST POP/xmrig.exe
windows10-1703-x64
10TEST POP/xmrig.exe
windows10-2004-x64
10TEST POP/xmrig.exe
windows11-21h2-x64
10General
-
Target
TEST POP.zip
-
Size
3.7MB
-
Sample
241005-hkz8fsvgkb
-
MD5
b933a7dfff54bc6a8a816f27b018f1d3
-
SHA1
dee34a8d314f29aa8b57657425bec770f8264006
-
SHA256
c5d5d86e51d8626be256fff486b4724275cf3b5532cd1d4ddfaeb9bdbdc172c2
-
SHA512
fe0c9901dee867453d067dd14cb774985589744e4e79e7f0d10a7bfd53e069868f5101115eb3d9834f9aa7d5fc298a8912a45f0c0149f77d99e04d32bee465b5
-
SSDEEP
98304:xsvYBDD+sOg66q67bDp51+re1aAA717SmESMy7dglIuJG3t:a0DKPg6i7bP1eSA71eRSMy7qIukd
Behavioral task
behavioral1
Sample
TEST POP/Start-Monero.bat
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
TEST POP/Start-Monero.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
TEST POP/Start-Monero.bat
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
TEST POP/Start-Salvium.bat
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
TEST POP/Start-Salvium.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
TEST POP/Start-Salvium.bat
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
TEST POP/Start-Zephyr.bat
Resource
win10-20240611-en
Behavioral task
behavioral8
Sample
TEST POP/Start-Zephyr.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
TEST POP/Start-Zephyr.bat
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
TEST POP/WinRing0x64.sys
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
TEST POP/WinRing0x64.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
TEST POP/WinRing0x64.sys
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
TEST POP/xmrig.exe
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
TEST POP/xmrig.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
TEST POP/Start-Monero.bat
-
Size
105B
-
MD5
94f509728ba74ed638dc087d0e9130cd
-
SHA1
e8ae09cdc5ae390b0b8e9f071bce1c0bf888ab01
-
SHA256
ca6f6d968bb34080f34c84a81bc7c1dd0b3976577752e2a50cf2f4ee48cf1cf2
-
SHA512
94a466db3b011c0bf0c844fc27cfdb914f2d29b930c75a80b73681661c00ae3a7183ec2be82f1c7f7f70239f35406289a00df4f3b756d99c905baff629214e37
-
XMRig Miner payload
-
-
-
Target
TEST POP/Start-Salvium.bat
-
Size
102B
-
MD5
f6c3ca8b6489dd2343401ed0610a47ce
-
SHA1
1d6342ce8af33a4ba298d7b5e619502a7dbfe195
-
SHA256
1496fedb69b8dd719ebe2413ad6d59c5277d928bff1a86df265dee9060a007a0
-
SHA512
089a357fe5cd949df1b997a52e65fccf2ed2d493b40b86f896a1d79c26b94544a66a4aaba12ee3a7511a721c795a9728011d18d334f6663a563ad0bbbba0ee1b
-
XMRig Miner payload
-
-
-
Target
TEST POP/Start-Zephyr.bat
-
Size
109B
-
MD5
ac98ba1277cf60c6d1b4cf9891469b42
-
SHA1
cefc8cd79edb7145fcfc5ded137887298147a5e2
-
SHA256
d1010eddf74f535336792bc8b31d73a2df0f00a10f083d93c5856ef6c9ef6699
-
SHA512
fbff0ee8ec53bd575a6adcabd3eb8167a7936293efdabe166e046f103a585f224dd2d43903571b1554f6d57b70c010a6220e2b8d0ad024b2bb68d4a7ea8fa826
-
XMRig Miner payload
-
-
-
Target
TEST POP/WinRing0x64.sys
-
Size
14KB
-
MD5
0c0195c48b6b8582fa6f6373032118da
-
SHA1
d25340ae8e92a6d29f599fef426a2bc1b5217299
-
SHA256
11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5
-
SHA512
ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d
-
SSDEEP
192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ
Score1/10 -
-
-
Target
TEST POP/xmrig.exe
-
Size
9.1MB
-
MD5
d6c24bdff1cb0f2fcbe5ae63c42c7d92
-
SHA1
6412934a06c3221a25ed1986098ec57d0c221cd8
-
SHA256
e5cd22ffe8725fbabf32ae2ba993d5b791e65e2ef159ad32ad260505f2e22480
-
SHA512
f8f028ebafcc96fd97984494c4773093be5b5e5eae820e3ae0097d101f8962d320863adcc944763104f0ad5efed01c3c6be88797fd9c40e5258642c5b325a2a6
-
SSDEEP
98304:LDbwKIstlHlMiXZgE3PhfUXMyf3477f37LmCMMK85CGi+6o4euU/XErD4cNaHd/4:j75izJSHFbs1lvp33
-
XMRig Miner payload
-