General

  • Target
    cs2 skinchanger.exe
  • Size 10.5MB
  • Sample260627-xvvs2sdt5m
  • SHA256 8925e35f4afb0d2e59a0e20ac0e0a0b10fd3d80eab9c0a7cde245edb74ba28e5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      cs2 skinchanger.exe
    • Size 10.5MB
    • SHA256 8925e35f4afb0d2e59a0e20ac0e0a0b10fd3d80eab9c0a7cde245edb74ba28e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks