General
- Target file.exe
- Size 10KB
- Sample260817-nvrxqabb55
- SHA256 a817e8e27b29552bbb35fccc35d0fa5cc4076b3590d42412b6e1b43b266b7c41
- MD5 e4a654948f3f9f5742c8d200ed72cf56
- SHA1 585afe5b4ac167345ce3f19f331dbd0d5d1b72aa
- SHA512 b460c32b25f24361bd55b1123cb600526ccb0c717bd7e20f1c3b2739ed999adbcaae34827e1397740b10b4c0081f464208ce394d965ec5b79f3912cf81f422bc
- SSDEEP 96:5XSFqd5omYz/J4hz96G7BPAdlHJDLRxef2VWTOJoPFJxGE9mZ2FFh/C7tCE637l:52UoVcg2BPuxeuVuPFJxTEZmFhE65
- TLSH T15C22E70E6E4B4231ED5009B0E6B54A0D563D5DE33781EEDBE732C5D71AD5F8084D22AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 10KB
- SHA256 a817e8e27b29552bbb35fccc35d0fa5cc4076b3590d42412b6e1b43b266b7c41
- MD5 e4a654948f3f9f5742c8d200ed72cf56
- SHA1 585afe5b4ac167345ce3f19f331dbd0d5d1b72aa
- SHA512 b460c32b25f24361bd55b1123cb600526ccb0c717bd7e20f1c3b2739ed999adbcaae34827e1397740b10b4c0081f464208ce394d965ec5b79f3912cf81f422bc
- SSDEEP 96:5XSFqd5omYz/J4hz96G7BPAdlHJDLRxef2VWTOJoPFJxGE9mZ2FFh/C7tCE637l:52UoVcg2BPuxeuVuPFJxTEZmFhE65
- TLSH T15C22E70E6E4B4231ED5009B0E6B54A0D563D5DE33781EEDBE732C5D71AD5F8084D22AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Downloads MZ/PE file
-
Creates new service(s)
-
Executes dropped EXE
-
Stops running service(s)
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
2Service Execution
2Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2