General

  • Target
    23516a667e98f72e36a12240cb0f0de5
  • Size 4.2MB
  • Sample220107-pnw4jacfeq
  • SHA256 21054e559ffbfd37f07ce33085fb9c4ed8e9583f66aaee1f68b51ea01ab2e757
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      23516a667e98f72e36a12240cb0f0de5
    • Size 4.2MB
    • SHA256 21054e559ffbfd37f07ce33085fb9c4ed8e9583f66aaee1f68b51ea01ab2e757
    • MD5 SHA1 SHA512
    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner Payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks