General

  • Target

    131af8a8cc66db262d3b62d17a964bad84d12004f975365b9727d111b4d8e79b

  • Size

    1.7MB

  • Sample

    241111-ykc1xsyjap

  • MD5

    b5cfb96a7a402769c8401f1ea6cdd3ec

  • SHA1

    b5263c57415efe6e18d68f98519a645dcc649869

  • SHA256

    131af8a8cc66db262d3b62d17a964bad84d12004f975365b9727d111b4d8e79b

  • SHA512

    2eeb49c3d17fbb9da6d53be276f16c5684b40737765290ef8e50a7163873e24e21d5a2c63bb2df9d07a0a0c8f6f4f459605e8fb8c3b1ff07f54336ee3cfe9d07

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwQHKoOM50wdjOBJ:Lz071uv4BPMkibTIA5CJhKoOQjGGUJ

Malware Config

Targets

    • Target

      131af8a8cc66db262d3b62d17a964bad84d12004f975365b9727d111b4d8e79b

    • Size

      1.7MB

    • MD5

      b5cfb96a7a402769c8401f1ea6cdd3ec

    • SHA1

      b5263c57415efe6e18d68f98519a645dcc649869

    • SHA256

      131af8a8cc66db262d3b62d17a964bad84d12004f975365b9727d111b4d8e79b

    • SHA512

      2eeb49c3d17fbb9da6d53be276f16c5684b40737765290ef8e50a7163873e24e21d5a2c63bb2df9d07a0a0c8f6f4f459605e8fb8c3b1ff07f54336ee3cfe9d07

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwQHKoOM50wdjOBJ:Lz071uv4BPMkibTIA5CJhKoOQjGGUJ

    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks