General
- Target https://www.mediafire.com/file/i839le86o6e2hw6/XMRig.zip/file
- Sample261027-adzz4sxt6p
Score
10/10
Malware Config
Targets
-
- Target https://www.mediafire.com/file/i839le86o6e2hw6/XMRig.zip/file
Score10/10-
Detect Neshta payload
-
Family: Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1