General

  • Target

    fbcea7444a36bd83fd38e4aeb3c7510b9fbfe9ba39cba90f27a0c8f8b160e615N

  • Size

    1.9MB

  • Sample

    241027-tpq15azfmr

  • MD5

    51037d5ad508539e2c71072bd4ea9de0

  • SHA1

    316b4e96da233b7df7e7b27f0b914027f08aa2a0

  • SHA256

    fbcea7444a36bd83fd38e4aeb3c7510b9fbfe9ba39cba90f27a0c8f8b160e615

  • SHA512

    caa4df41751a838ecf2bdb2320e585858d1ab27c76e3050835cd1e7ee927c822186cdddb0d9c50c075540b32a7918a3cbf5696b2eb8f88a1707ff5f0bf8e1ee5

  • SSDEEP

    49152:Lz071uv4BPMkHC0IlnASEx/RiNcT1D/GC6Z:NABk

Malware Config

Targets

    • Target

      fbcea7444a36bd83fd38e4aeb3c7510b9fbfe9ba39cba90f27a0c8f8b160e615N

    • Size

      1.9MB

    • MD5

      51037d5ad508539e2c71072bd4ea9de0

    • SHA1

      316b4e96da233b7df7e7b27f0b914027f08aa2a0

    • SHA256

      fbcea7444a36bd83fd38e4aeb3c7510b9fbfe9ba39cba90f27a0c8f8b160e615

    • SHA512

      caa4df41751a838ecf2bdb2320e585858d1ab27c76e3050835cd1e7ee927c822186cdddb0d9c50c075540b32a7918a3cbf5696b2eb8f88a1707ff5f0bf8e1ee5

    • SSDEEP

      49152:Lz071uv4BPMkHC0IlnASEx/RiNcT1D/GC6Z:NABk

    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks