Overview

overview

10

Static

static

3

67654a92f8...a8.exe

windows7-x64

10

67654a92f8...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67654a92f862e349484e1a617ecf9dd7d3959d026f429f1480919be6dc41baa8.exe

  • Size

    2.5MB

  • Sample

    241121-bn479axbjh

  • MD5

    8e23251437fa1dee266f37fb780849df

  • SHA1

    936748a0298a97950b7ce34de64a79074db21eeb

  • SHA256

    67654a92f862e349484e1a617ecf9dd7d3959d026f429f1480919be6dc41baa8

  • SHA512

    46a988454007930915a41467eaec792575d2fc4d3c30e1d4f0287a7d904d6f929235206386cd1cfeb756b84875442a7ff172549d2e209be257782298170e082c

  • SSDEEP

    49152:J846cK0B7PlZRb1aLeb2eIitRSq10qaJF1CQC0Tn:JQcK0hPtpBZIitgT9F1hC4

Score
10/10
xmrigdiscoveryminer

Malware Config

Targets

    • Target

      67654a92f862e349484e1a617ecf9dd7d3959d026f429f1480919be6dc41baa8.exe

    • Size

      2.5MB

    • MD5

      8e23251437fa1dee266f37fb780849df

    • SHA1

      936748a0298a97950b7ce34de64a79074db21eeb

    • SHA256

      67654a92f862e349484e1a617ecf9dd7d3959d026f429f1480919be6dc41baa8

    • SHA512

      46a988454007930915a41467eaec792575d2fc4d3c30e1d4f0287a7d904d6f929235206386cd1cfeb756b84875442a7ff172549d2e209be257782298170e082c

    • SSDEEP

      49152:J846cK0B7PlZRb1aLeb2eIitRSq10qaJF1CQC0Tn:JQcK0hPtpBZIitgT9F1hC4

    Score
    10/10
    xmrigdiscoveryminer

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks