General
- Target file.exe
- Size 10KB
- Sample260817-pddjfaar4t
- SHA256 4c0b8df79c22b4734f2a7f1a484e13639f4d0d0ef67bdfa6c62a76a00cca7bf8
- MD5 4a5541d86543137db217af9e4423dacf
- SHA1 31d0700ba53db7a029b7b76efe6b034de01bf508
- SHA512 b7199d0e656cd6252ffff1d210f8bf409357580b9f876a814c7a977ff1c9cb165963430e5da5702b4426f1774e1eee174da15796b06eb14ec892d3e1c654c8ad
- SSDEEP 96:9dNomYz/9PYz/+MZrQzm7Bs3AdynpDLRxef2IY28Bm8EPFJxGE9mZ2FFh/C7tCED:BoVW7QzWBgtxeuITPFJxTEZmFhEKcq
- TLSH T1E822D61E6E4B0232DD6108B0E6B58909613E4DE33785FAEBE333C5D70AD6E4084C16AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 10KB
- SHA256 4c0b8df79c22b4734f2a7f1a484e13639f4d0d0ef67bdfa6c62a76a00cca7bf8
- MD5 4a5541d86543137db217af9e4423dacf
- SHA1 31d0700ba53db7a029b7b76efe6b034de01bf508
- SHA512 b7199d0e656cd6252ffff1d210f8bf409357580b9f876a814c7a977ff1c9cb165963430e5da5702b4426f1774e1eee174da15796b06eb14ec892d3e1c654c8ad
- SSDEEP 96:9dNomYz/9PYz/+MZrQzm7Bs3AdynpDLRxef2IY28Bm8EPFJxGE9mZ2FFh/C7tCED:BoVW7QzWBgtxeuITPFJxTEZmFhEKcq
- TLSH T1E822D61E6E4B0232DD6108B0E6B58909613E4DE33785FAEBE333C5D70AD6E4084C16AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Downloads MZ/PE file
-
Creates new service(s)
-
Executes dropped EXE
-
Stops running service(s)
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
2Service Execution
2Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2