General
- Target 50c1d0c1c6065912f0f6ba3bc5e94170e8b6b67db9a959d587dda6fed94b0eb9.zip
- Size 7KB
- Sample260919-sbb5dagf37
- SHA256 50c1d0c1c6065912f0f6ba3bc5e94170e8b6b67db9a959d587dda6fed94b0eb9
Malware Config
Targets
-
- Target 07d9a612da27a42d356d600ac08f3d4e014c44b684a030ed20acc4c0946306e4.ps1
- Size 904B
- SHA256 07d9a612da27a42d356d600ac08f3d4e014c44b684a030ed20acc4c0946306e4
Score10/10-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
- Target 4b12c33fecf0012486048a93bbe1c7a116a78d37eff89f6a6ad657b1c9efa1df.ps1
- Size 904B
- SHA256 4b12c33fecf0012486048a93bbe1c7a116a78d37eff89f6a6ad657b1c9efa1df
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target 688a70e7bda8bd48deba9891f5c707ce37bf374710de01a6dd6a66345ea1985a.ps1
- Size 904B
- SHA256 688a70e7bda8bd48deba9891f5c707ce37bf374710de01a6dd6a66345ea1985a
Score10/10-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
- Target 6c9f4a4900f941831639c018be982b863a7edf82c7abf2c62059049acc8f7341.ps1
- Size 904B
- SHA256 6c9f4a4900f941831639c018be982b863a7edf82c7abf2c62059049acc8f7341
Score10/10-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
- Target 7c2f2f22a119cb464b6fab6398ac056e187bf2da62569aa0c51be3123e75e3f4.ps1
- Size 904B
- SHA256 7c2f2f22a119cb464b6fab6398ac056e187bf2da62569aa0c51be3123e75e3f4
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target 9066d677ae88310851b477b73bbe242cd1e2212c4df4a1515d29afaff2ab2604.ps1
- Size 904B
- SHA256 9066d677ae88310851b477b73bbe242cd1e2212c4df4a1515d29afaff2ab2604
Score10/10-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
- Target cb2ae14d6e03c7b915b18b9ea6f8528b599be1bff92fe67c674bf4e873797467.ps1
- Size 904B
- SHA256 cb2ae14d6e03c7b915b18b9ea6f8528b599be1bff92fe67c674bf4e873797467
Score10/10-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
- Target e9f29ccc847107858d6930a8d31fb7d4049c73b5eae75b707577a28dc6e7d957.ps1
- Size 904B
- SHA256 e9f29ccc847107858d6930a8d31fb7d4049c73b5eae75b707577a28dc6e7d957
Score10/10-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target f76ee3e601d740eef5ed1303d5dab97d1743b593bb551913661f0bc5ecca65fb.ps1
- Size 904B
- SHA256 f76ee3e601d740eef5ed1303d5dab97d1743b593bb551913661f0bc5ecca65fb
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target fb6b20561e67af972be94e33dcd8e5ebd4ca9187283486a0ae7081c850e8c31c.ps1
- Size 904B
- SHA256 fb6b20561e67af972be94e33dcd8e5ebd4ca9187283486a0ae7081c850e8c31c
Score10/10-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE