General
- Target file.exe
- Size 10KB
- Sample260912-zjyrnsvbpc
- SHA256 89ea7049eae2af35ebbd64531a11d50f9364992db0dc8960b8961551289779cd
- MD5 774ef6bc2f8625205611ced30bb4eee4
- SHA1 b81bdac4a08284cb86b20498403d5f0c245fd198
- SHA512 34d6ff9cc6a0ad8350537a8ca9716113c4cd2cad0b2c8b925eb4952754e63a82150db1458cfc061c1aa6b5562b175ab5b4773f6366ba18d1418f4febd921197c
- SSDEEP 192:N0oVWUBJBqcx+ep/I5PFJxTEZmFhSKcq:N0ozBecwCI5PFwZ2
- TLSH T118223A2E6E890032D3900DF016B54A5DA57E457327C6B3EBF333C5990EE62448042BEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 10KB
- SHA256 89ea7049eae2af35ebbd64531a11d50f9364992db0dc8960b8961551289779cd
- MD5 774ef6bc2f8625205611ced30bb4eee4
- SHA1 b81bdac4a08284cb86b20498403d5f0c245fd198
- SHA512 34d6ff9cc6a0ad8350537a8ca9716113c4cd2cad0b2c8b925eb4952754e63a82150db1458cfc061c1aa6b5562b175ab5b4773f6366ba18d1418f4febd921197c
- SSDEEP 192:N0oVWUBJBqcx+ep/I5PFJxTEZmFhSKcq:N0ozBecwCI5PFwZ2
- TLSH T118223A2E6E890032D3900DF016B54A5DA57E457327C6B3EBF333C5990EE62448042BEF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Downloads MZ/PE file
-
Creates new service(s)
-
Executes dropped EXE
-
Stops running service(s)
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
2Service Execution
2Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
2Windows Service
2