General

  • Target

    d4f706b78dc69da2c905d60adb4695d7af28567704b8253d19e7a0b18b5a7039N.exe

  • Size

    1.6MB

  • Sample

    250201-vlpjkatmgp

  • MD5

    3e47b58eb69c9578bc915bcc58d27f80

  • SHA1

    0606d391fc9a6dc589f5813cfd6c8a19081f8a14

  • SHA256

    d4f706b78dc69da2c905d60adb4695d7af28567704b8253d19e7a0b18b5a7039

  • SHA512

    7fe2df81be7623700bd54996d5f5a6b241afd14a2b8e8c016f47912550c4168ee0fd8017c2368e669107dcbdd1f9a1085ec5fa8aa83e45e0ad22b5c9d28d14ed

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zy:Lz071uv4BPMkibTIA5lCx7kvRWa4pXYi

Malware Config

Targets

    • Target

      d4f706b78dc69da2c905d60adb4695d7af28567704b8253d19e7a0b18b5a7039N.exe

    • Size

      1.6MB

    • MD5

      3e47b58eb69c9578bc915bcc58d27f80

    • SHA1

      0606d391fc9a6dc589f5813cfd6c8a19081f8a14

    • SHA256

      d4f706b78dc69da2c905d60adb4695d7af28567704b8253d19e7a0b18b5a7039

    • SHA512

      7fe2df81be7623700bd54996d5f5a6b241afd14a2b8e8c016f47912550c4168ee0fd8017c2368e669107dcbdd1f9a1085ec5fa8aa83e45e0ad22b5c9d28d14ed

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zy:Lz071uv4BPMkibTIA5lCx7kvRWa4pXYi

    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks