General
-
Target
aabd6cf8e3df025fcf02b6b52a6c2bbaae88e8384bd41349e87fabbd4286dbc8
-
Size
1.7MB
-
Sample
241218-d6fcyssqdn
-
MD5
03313b21f6c97b28243e810c89d1bb9e
-
SHA1
a827cc9b9a56f85e5223a518e5065ead3e85ce36
-
SHA256
aabd6cf8e3df025fcf02b6b52a6c2bbaae88e8384bd41349e87fabbd4286dbc8
-
SHA512
ac24c2190b864a0e31b45084cc8ca88dfe4d05a412ce4a106ed9a0eb65d3a6f3abb82c67a8fbfc6c90d9ccf3206ecebc037de45ba0e1c0a757019fa8cc472fb0
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQbZL10:GemTLkNdfE0pZy1
Malware Config
Targets
-
-
Target
aabd6cf8e3df025fcf02b6b52a6c2bbaae88e8384bd41349e87fabbd4286dbc8
-
Size
1.7MB
-
MD5
03313b21f6c97b28243e810c89d1bb9e
-
SHA1
a827cc9b9a56f85e5223a518e5065ead3e85ce36
-
SHA256
aabd6cf8e3df025fcf02b6b52a6c2bbaae88e8384bd41349e87fabbd4286dbc8
-
SHA512
ac24c2190b864a0e31b45084cc8ca88dfe4d05a412ce4a106ed9a0eb65d3a6f3abb82c67a8fbfc6c90d9ccf3206ecebc037de45ba0e1c0a757019fa8cc472fb0
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQbZL10:GemTLkNdfE0pZy1
Score10/10-
Xmrig family
-
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Accessibility Features
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Accessibility Features
1