Overview

overview

10

Static

static

3

39d49dd870...13.exe

windows7-x64

3

39d49dd870...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39d49dd87075785ac6f007e5a006d08df57b225a8edb46417e56d0d8c4141113

  • Size

    1.6MB

  • Sample

    250328-v8y2hsyzgx

  • MD5

    5a11bd589ed385b948998d9a9ee112ac

  • SHA1

    7a079b9d4fcb5ff29bb465f9c612325ca4fee918

  • SHA256

    39d49dd87075785ac6f007e5a006d08df57b225a8edb46417e56d0d8c4141113

  • SHA512

    1fcfbb528afcc17ac39e9af4ee9203258dd9d280bc19b08d1a0dc0d1d39ec56abab26d5c44e5a0c2847596bfc337c96a12f33ad6d410551a055e226b08ea26a7

  • SSDEEP

    24576:YBeB6u8s5VIf7Ab1wgDVh5NbfgGIblGQaGAVzMcPpef9J61YXmjzGHHrs90LeR0G:Yts5V5bSIh5Robl+Gd6pzGg90o0Tic0z

Score
10/10
xmrigdiscoveryminer

Malware Config

Targets

    • Target

      39d49dd87075785ac6f007e5a006d08df57b225a8edb46417e56d0d8c4141113

    • Size

      1.6MB

    • MD5

      5a11bd589ed385b948998d9a9ee112ac

    • SHA1

      7a079b9d4fcb5ff29bb465f9c612325ca4fee918

    • SHA256

      39d49dd87075785ac6f007e5a006d08df57b225a8edb46417e56d0d8c4141113

    • SHA512

      1fcfbb528afcc17ac39e9af4ee9203258dd9d280bc19b08d1a0dc0d1d39ec56abab26d5c44e5a0c2847596bfc337c96a12f33ad6d410551a055e226b08ea26a7

    • SSDEEP

      24576:YBeB6u8s5VIf7Ab1wgDVh5NbfgGIblGQaGAVzMcPpef9J61YXmjzGHHrs90LeR0G:Yts5V5bSIh5Robl+Gd6pzGg90o0Tic0z

    Score
    10/10
    discoveryxmrigminer

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks