0f54e7cb9eb7c6876aa862db6de3aeb3b8d13affb66b6481c97da1978e27d169

Sharing

Copy URL Twitter E-mail

General

Target
cpuminer-gr-avx2-1.2.4.1.zip
Size 1.3MB
Sample260817-pqe8ssbe68
SHA256 0f54e7cb9eb7c6876aa862db6de3aeb3b8d13affb66b6481c97da1978e27d169
MD5 450d06ec2276d9d1d0b6feac96241470
SHA1 0abd897227ca3baed2301f103403cb0b5e401cdd
SHA512 239f0d181785d5685822ac7114cc07f6bba9e2d8892cd123b0c2a7a5029ab75056ace4bc6d06de75f356175ebf0542a4f1a585486b1bad446f223f2c792320b1
SSDEEP 24576:0bqmG3BJT7NHxAL+8BdM4n/opNoyU/Ps5W/4mffIIrs07EppKu/rCEn:jTqRB+UQp+3cI/4AIIrn4p
TLSH
T1246512B305A05F73E909E43B9C860315C4158B87DA4ECF095A582961EFBF8C16F1EB6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  cpuminer-gr-avx2-1.2.4.1/aclocal.m4
- Size 43KB
- SHA256 dfb154957596fb5703c75846bb061368e5a9e696daf0ece7d5d4479a1a7b71cd
- MD5 51767dad67f14b6f4e4036076da23dd5
- SHA1 14c5c12d93df7df8de6ef56fe095b68df8471f29
- SHA512 2d73d4defafc479e0ecde63837407c1911365129410710ca4f8e4e5392f2e1f36ee9ce4305a24b1aa69600e008b2ad96ae548db241ff1aae32d4213f4b1a9629
- SSDEEP 768:J1aRyCOaIBS4uUbsHIWvxRYbE7ZHoo3otzKf9lLGY5LdG3ENQJpMtklyqteW4Icq:J1ayCOaIBS4RbsHIW5CbEV13otGllLGz
- TLSH
  T186133A163D4A27B41880C2F211DFA2A6EB2593BE3679209471DDD14C7B0E97E42BF5EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  cpuminer-gr-avx2-1.2.4.1/algo/groestl/aes_ni/brg_endian.h
- Size 5KB
- SHA256 886fc1c749661f03cc7b1dd6aae698a0dfa62b1a51e3298f39a9f3939b1e9532
- MD5 4f4127a385d60e76cee0e4a1c00bdcc3
- SHA1 3298dcd90afebd5df6807179e5fff2dbbd3e2be0
- SHA512 edd3871208c597d3fe2dc31019221583a16ed4777a342cdfef3c8eaf26c7194af0032086f4c4b6396f8626d0667f1974c837db87014328fedd183ab42d2d5b1e
- SSDEEP 96:IrXgJ1rYJc2CDB+d0R8JFxP25ervlnG1cwXo26BqxlpflzHv7/LXyKIAfRivRic:IrXk1rscLB+k8rxMzLLCoRMRz
- TLSH
  T14AB1C153AF961A108533C175100C89ABE608DCFF239A59E937092D8DAF5E520B4FD7DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  cpuminer-gr-avx2-1.2.4.1/algo/sha/brg_types.h
- Size 7KB
- SHA256 d1982d1db018e673b4aec649797e1f2781c13aeb3708bb3bbd97d6cdc75a7301
- MD5 7387cbac86a4bbce5b4997bf853b6558
- SHA1 b8a9a9964dc0993751d6849741284e8b8d056120
- SHA512 834e90bab40d9e40747d152dac644901915ddcef51b7d1970008aa378d0eb077edf5e9fd229f0f9813c5e41777bca7997af3e34f13c796f3181fa210165fc927
- SSDEEP 96:5XrXgJ1rYJc2C/9ZspM2HYhsb5wFd65IIZL4IJ4/7YzJqLxW7YzJzJ1Wl6DdWbKx:5XrXk1rscNh2HYhjH84/CYwbKx
- TLSH
  T157F1EC166F8A91B12033C423654DE697EA18C87B27D299F4348D0CBC6FA7424B9FC7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  cpuminer-gr-avx2-1.2.4.1/autogen.sh
- Size 244B
- SHA256 ff6fc61ec06409a55e314cc105ad022544748ad417199a1925bd3b1eee78bb28
- MD5 5a0b64119d7ca3ddb0ac8d6c8dc0ce07
- SHA1 1f67f402df7fc25e37916d18fdcc07d1511ac051
- SHA512 fca61962a5fdbb70888c36f35108ad77d66ac94ad7ff10ba628cfcd3565f91cd06ca35dd1d02896bb9901250a14a02796b7a98a080ceed4217ca8553e4a16544
- TLSH
  T106D0A77F12115A615EEC0C3832B685725F1CF34F032406BC9E2FD29EA31568954BC683
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  cpuminer-gr-avx2-1.2.4.1/bin/WinRing0x64.sys
- Size 14KB
- SHA256 11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5
- MD5 0c0195c48b6b8582fa6f6373032118da
- SHA1 d25340ae8e92a6d29f599fef426a2bc1b5217299
- SHA512 ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d
- SSDEEP 192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ
- TLSH
  T1096218874B7E1906FB969F7592E9C7936D34F6C0CFA825CF421299982C413E0AF2861C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  cpuminer-gr-avx2-1.2.4.1/bin/cpuminer.bat
- Size 9KB
- SHA256 b8af9a1585c49db734177022cce7470ff8d971944cd9bd4e24f3d9e1dcda1484
- MD5 760acb6a82112f90741b5c6b544d7cd0
- SHA1 25753e54691e83df71a1f5c452be427b586a681a
- SHA512 ac7083b6c03c34d394ad85f4abe6741fe2a7e42f70f84ba8f982035098279ac040f7c1cce76827e9e34d41fc1ed9ad13f307e175ea5e449e9a42bbd3a3846a96
- SSDEEP 192:uQiwBqL82LhJrQ90Bs617M3kOfEo1xr1kLxRLM9+mc0oi9FNzEOLkJ0JY25zezm7:uQYo23xx9rXg
- TLSH
  T17E22CD1C3C2B2564C1C9733D268276A07E01EA4E10F808E9E43F825AE5C9BD87D7D8CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion execution
behavioral13 behavioral14
- Target
  cpuminer-gr-avx2-1.2.4.1/bin/cpuminer.sh
- Size 4KB
- SHA256 ea18d5e603cd1febf11c103ee4809478f34a87c84b2a4f4989f9e584fd6dd776
- MD5 211e2923733f895e7ae73a8d006539c6
- SHA1 f3cb0c873bebdada59e088e2e8fafb6f23629188
- SHA512 5e184e3b1ef6ce4ffe3175f41e58f203852dfd9933eb07984e618e6d0870907dac8b9cb81d06605c43227e090447196c6d8c8260e1c1317fc7d93bfbd6682521
- SSDEEP 96:s2xyLu1COQW3Hm3ETGq3TX3TGD3kGC13p3Ye363P2BX4XgL2chRl6chXlWhQlTT0:hgvv3R0TniDVGFYoEPPgLDR5X+Qfe2zk
- TLSH
  T121B153B77814B2FC995C02D05267B588EA06116F3EF11F56710E3958373C76CB8BA1AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

antivm discovery
- Checks system information (zLinux)
  Check system information on IBM zSystems which indicate if the system is a virtual machine.
  antivm
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  cpuminer-gr-avx2-1.2.4.1/build-allarch.sh
- Size 1KB
- SHA256 1e3e96e541b96da6ef35128b463e6828d9c6aa1a1c7e452dfc82392b91f0ef26
- MD5 5d5560625209e9b841cbaed600c28afb
- SHA1 8ceaa4610cd696214992bc07b0089a2f8f405a04
- SHA512 37a632a5d5df0d8c297fa2330a7f985388dc154b3864ed8ae8a096aef291e77bd70c4d37b09d43b381f31a3568bdc4bfa2c2f2df13c075214a47208dfa9f980e
- TLSH
  T1A34114B7A50D6C63418600D67B48B25B6B15C69F2FD2267A3C2814B53347FBC4652D7C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  cpuminer-gr-avx2-1.2.4.1/build.sh
- Size 720B
- SHA256 2781bc1971cb64b192cbebf08477700de884f1e2510c8e11ba1884e4246dd9c1
- MD5 af0bb5681da5c2d66016d274f85c6e0a
- SHA1 f4c9d77c598a91fdd2828de339f943af48281e4b
- SHA512 e8cd0b9e69ebfa5101fca0925599440d2976c3243bd6dd4f685e598eec90928ea01a694be11fc4ff0a6c2a7e1e1b5331e2bd9591b3b520505179806860c9f0f4
- TLSH
  T1EE0115A351DC0EF3940119D477422565F541250F9DC21889E4DF332C2FC4D98E62D3BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  cpuminer-gr-avx2-1.2.4.1/compat/pthreads/pthread.h
- Size 41KB
- SHA256 a7292e8c30e93b82a1cec734b4d8cd5ad05abbf5da81282735cb5431788407d0
- MD5 8d4340fe44dd2a249bc8b5ec927ade71
- SHA1 30460ebcb8539f3f587ebd50b9ea66eed062cf19
- SHA512 5f210a07d1c894521e8302d9135caa7a1bb62ac16c55ed93f21d6587d208ca4f8d3daee291cf5ecabac1fd11cedfd02f35e91792adddb522fdf9ac4068793048
- SSDEEP 768:K2EhhnOcgMB2B6lbdrp2H2dbZku1bdWtOZz1SAvtNCRPRyv:SdcBubTc2fo01SAvtNCT8
- TLSH
  T18013559A5D6C21E306D2CC30142A14C2D91BD62B3B54A0ACF64EE1F81F8E795B1FEE95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  cpuminer-gr-avx2-1.2.4.1/configure
- Size 217KB
- SHA256 c681da29aec73ea925747495a3d6e5301c5be87c06d4cc6f7781f4ecaa73304a
- MD5 6bf495ccd7e4d833e5f76294a5b94f40
- SHA1 4e6025c450886b07bf626d9cfb5ac61ad6bd4388
- SHA512 6a34cd53c2cd97947861efef7d33160cafd39953bf4421a7670fa37527ecb9ac27f13d0c5bb30842f42597f197a48529555e57b215a0b8fb8ac9bb7371ae3a94
- SSDEEP 6144:3x9sXthkMmj4C4oRpqE8xPTxoToVYtF8HdJE3Hgrh+B8Q+pDKzTvKC6KNpYrXYBy:fkpGxpS
- TLSH
  T12A24F8B3798748792210C9F0229F7061A7859A5729311CA5FADD93383F147FAA0AF3F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  cpuminer-gr-avx2-1.2.4.1/cpu-miner.c
- Size 143KB
- SHA256 0344c6913619880db6d578e231b7e2489f4df18971a8adefb5ebec5b33f2448c
- MD5 77683486391fca62c1d9dc6144507f09
- SHA1 6ed78fe45478ee4f536a22ed1e8dc54d496b516c
- SHA512 f9f68ca53a367dfdaf0a0495e0a845575cdc198195e4bfa8c63468feccbb4d2d1519acd0481c497b1989305add8074d5d1bf28933319ccd99b7c0601c7eb9125
- SSDEEP 1536:dhV+/quFb2CKvrXt7HJj4SnB+TMdz77uLZoMykMX8bWzRsWObmbNrtovwFvQlVsB:P2quVKzXfstsDRjFvassyIo5
- TLSH
  T13EE30A182DBF105285B36D3D6B4F5256A3558003624ED850FD9DC3E8AFC8178B2F9EAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks system information (zLinux)

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32