Resubmissions

27/06/2026, 16:07

260627-tksn6acs9j8

27/06/2026, 16:07

260627-tkr3macs8r7

27/06/2026, 16:07

260627-tkq6bscs8q7

27/06/2026, 15:42

260627-s5l7fab17j1

27/06/2026, 15:39

260627-s3q3lsb15p8

27/06/2026, 15:38

260627-s3e1cabw2y7

27/06/2026, 15:38

260627-s3dsaabw2x7

27/06/2026, 15:23

260627-ssmbnsb12q8

27/06/2026, 15:23

260627-ssftwsbv5z7

27/06/2026, 15:22

260627-sr6nxsb12p7

General

  • Target
    GRANTEST.rar
  • Size 1KB
  • Sample260627-s3q3lsb15p
  • SHA256 36b9f94c8278f879499b0f1b7aaca1eedd81a8163d5280e0929928dbf9701d6b
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      GRANTEST/testplusminotaux - Copie (10).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    Score
    7/10
    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Target
      GRANTEST/testplusminotaux - Copie (11).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    Score
    7/10
    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Target
      GRANTEST/testplusminotaux - Copie (12).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      GRANTEST/testplusminotaux - Copie (13).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      GRANTEST/testplusminotaux - Copie (14).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      GRANTEST/testplusminotaux - Copie (2).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      GRANTEST/testplusminotaux - Copie (3).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      GRANTEST/testplusminotaux - Copie (4).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    Score
    7/10
    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Target
      GRANTEST/testplusminotaux - Copie (5).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    Score
    7/10
    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Target
      GRANTEST/testplusminotaux - Copie (6).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    Score
    7/10
    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Target
      GRANTEST/testplusminotaux - Copie (7).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      GRANTEST/testplusminotaux - Copie (8).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    Score
    7/10
    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Target
      GRANTEST/testplusminotaux - Copie (9).bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      GRANTEST/testplusminotaux - Copie.bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      GRANTEST/testplusminotaux.bat
    • Size 44B
    • SHA256 b2a6dcdaed01552e0d257db981aa9b1448c9b69a832240a94faa68a6b7d8c928
    • MD5 SHA1 SHA512
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Cryptocurrency Miner

      Makes network request to known mining pool URL.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

discoveryminer
Score
7/10

behavioral2

discoveryminer
Score
7/10

behavioral3

discoveryminerpersistenceransomware
Score
8/10

behavioral4

discoveryminerpersistenceransomware
Score
8/10

behavioral5

discoveryminerpersistenceransomware
Score
8/10

behavioral6

discoveryminerpersistenceransomware
Score
8/10

behavioral7

discoveryminerpersistenceransomware
Score
8/10

behavioral8

discoveryminer
Score
7/10

behavioral9

discoveryminer
Score
7/10

behavioral10

discoveryminer
Score
7/10

behavioral11

adwarediscoveryminerpersistenceransomwarespyware
Score
8/10

behavioral12

discoveryminer
Score
7/10

behavioral13

adwarediscoveryminerpersistenceransomwarespyware
Score
8/10

behavioral14

discoveryminerpersistenceransomware
Score
8/10

behavioral15

discoveryminerpersistenceransomware
Score
8/10