General
- Target input.exe
- Size 3.0MB
- Sample260831-tk2l3ahd62
- SHA256 d0472c2cbdc7fbdd5a9448bda1a2df6127d4bf704b2dec080a536e92e8f9d893
- MD5 a02f20997c998fb40ad798d813c90800
- SHA1 57b06c8419647c747bb0722ec8cf9332e90ba624
- SHA512 b07984c7db6e5f19395c8f3fd2ae99a6058c19a2186f1e9bdf5ef001e563ad952689896b81ce1f9269c382bd601f595072a4e59b7a354703aac1ba87857877ad
- SSDEEP 49152:2iNVYFezpYdeSl0xtzCtc1v4Ldhf04tVGZM/NPtsbR+FgmcQuhFRH4ln3tvseK:2MVzpYkACOtFnbGcnsbihe4ln3tvs
- TLSH T16EE53384A86A5479CA6253BC6CFB0133B75A39458215FBCB6370E1B027A5BF13F72139
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
input.exe
Resource
win10v2004-20260513-en
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
input.exe
Resource
win10ltsc2021-20260513-en
9 signatures
900 seconds
Behavioral task
behavioral3
Sample
input.exe
Resource
win11-20260513-en
10 signatures
900 seconds
Behavioral task
behavioral4
Sample
input.exe
Resource
win11ltsc2024-20260709-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target input.exe
- Size 3.0MB
- SHA256 d0472c2cbdc7fbdd5a9448bda1a2df6127d4bf704b2dec080a536e92e8f9d893
- MD5 a02f20997c998fb40ad798d813c90800
- SHA1 57b06c8419647c747bb0722ec8cf9332e90ba624
- SHA512 b07984c7db6e5f19395c8f3fd2ae99a6058c19a2186f1e9bdf5ef001e563ad952689896b81ce1f9269c382bd601f595072a4e59b7a354703aac1ba87857877ad
- SSDEEP 49152:2iNVYFezpYdeSl0xtzCtc1v4Ldhf04tVGZM/NPtsbR+FgmcQuhFRH4ln3tvseK:2MVzpYkACOtFnbGcnsbihe4ln3tvs
- TLSH T16EE53384A86A5479CA6253BC6CFB0133B75A39458215FBCB6370E1B027A5BF13F72139
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of SetThreadContext