Overview

overview

10

Static

static

3

2024-11-18...ch.exe

windows7-x64

1

2024-11-18...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-18_29b9a3177286d75c54c2b5e47c9eae0a_frostygoop_poet-rat_snatch

  • Size

    7.2MB

  • Sample

    241118-btmv6azkhr

  • MD5

    29b9a3177286d75c54c2b5e47c9eae0a

  • SHA1

    bd9e461f79fa739d9ec4882fba0ad970d990dca6

  • SHA256

    0b73f3f47424d3a84d8fe9eda96b3e860d8004d60070a328d22ab82d0b68a3ef

  • SHA512

    76fd106fe9ea66841f66b1e85301f922635f69af3c03ac4a3b62a4b94fbf07058129dc8488cc333e30b1b8e6ae1426be5c55980d8ae96cce542ebed286251f68

  • SSDEEP

    98304:R+8WZoZY1nliyx2v9yfZrM2n8XEmFasiw7vJnmJGxJpJPM9Gj:uZJNU6BrM2ncFaRsZxbJPR

Score
10/10
xmrigdiscoveryminer

Malware Config

Targets

    • Target

      2024-11-18_29b9a3177286d75c54c2b5e47c9eae0a_frostygoop_poet-rat_snatch

    • Size

      7.2MB

    • MD5

      29b9a3177286d75c54c2b5e47c9eae0a

    • SHA1

      bd9e461f79fa739d9ec4882fba0ad970d990dca6

    • SHA256

      0b73f3f47424d3a84d8fe9eda96b3e860d8004d60070a328d22ab82d0b68a3ef

    • SHA512

      76fd106fe9ea66841f66b1e85301f922635f69af3c03ac4a3b62a4b94fbf07058129dc8488cc333e30b1b8e6ae1426be5c55980d8ae96cce542ebed286251f68

    • SSDEEP

      98304:R+8WZoZY1nliyx2v9yfZrM2n8XEmFasiw7vJnmJGxJpJPM9Gj:uZJNU6BrM2ncFaRsZxbJPR

    Score
    10/10
    xmrigdiscoveryminer

    • XMRig Miner payload

      miner

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Drops startup file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks