Overview

overview

10

Static

static

1

d29acdeb13...d7.exe

windows7-x64

10

d29acdeb13...d7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6da5cd2f797bd2f7dbaadba3d332f986bcd7462e844093fc80642e457e2ae161

  • Size

    8.6MB

  • Sample

    241224-dafnvazpfq

  • MD5

    2644bcbbd338237d64fffec3bc67ccb9

  • SHA1

    e76746be2a9593643c8a719a14f32dc82bfef8bc

  • SHA256

    6da5cd2f797bd2f7dbaadba3d332f986bcd7462e844093fc80642e457e2ae161

  • SHA512

    5046cdc0cb1fac2c7e68941c8da06f6eb8cc8ebebe8853e8c08df0f310245e6d1b1ca8a6539dc9ea7b8a60d602ea12c8ebdd7c0f70174149f8c339bf46e9b820

  • SSDEEP

    196608:BZd27AWBcN9llETG9uT5oIiyzQ9D+2up/0+xKMoN9hz2QVJg04HrlQF:BZd27x+N9lN90+Iij/axKbBO5Bg

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      d29acdeb134477223baaf3b97aef34f5ff2b5832567718025bdac30421ac7ad7

    • Size

      9.0MB

    • MD5

      be6b6e027032475d9803d34e0a41a956

    • SHA1

      7f04a35dc8c3db0a683d71ae8edde8d3ed583e65

    • SHA256

      d29acdeb134477223baaf3b97aef34f5ff2b5832567718025bdac30421ac7ad7

    • SHA512

      fd4d399caa663eaaebd73bdc79071dddd7e66913b084c2d4e1b989743383b86e1e89d109ef43a929c55ad65824d62ebecd2320d878a277727521c1cdbc8f8df4

    • SSDEEP

      196608:bnK5xpo5NflpgSy6CkhJEtYBAmg9/1+U1/rekiA5ldBY4vaOM:bapo5NflpgSTLJEYhQ/1+U9LHdqr

    Score
    10/10
    xmrigminer

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks