Overview

overview

10

Static

static

sqlservr.exe

windows7_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sqlservr.exe

  • Size

    3.9MB

  • Sample

    211203-tvvw9scab3

  • MD5

    325d88ea2ee59fc0faec0cd4e6db494e

  • SHA1

    63f2c5cbabd05e857c983741f4b9d71f7fbc6f69

  • SHA256

    eef7b9db43f331b41bfdc87fa0517fbd76981a9b9574fe2ee45bcc1ca390e616

  • SHA512

    6fdc79184bb209c1ec7e4a720fa6aed6a50a6dae2a6773d2c30c71be0eadbf2fb5dad6f906815a977a4081b239a06c4d087bcbb9b01a7aa8ffd8e4f0bb659cc2

Score
10/10
xmrigminer

Malware Config

Targets

    • Target

      sqlservr.exe

    • Size

      3.9MB

    • MD5

      325d88ea2ee59fc0faec0cd4e6db494e

    • SHA1

      63f2c5cbabd05e857c983741f4b9d71f7fbc6f69

    • SHA256

      eef7b9db43f331b41bfdc87fa0517fbd76981a9b9574fe2ee45bcc1ca390e616

    • SHA512

      6fdc79184bb209c1ec7e4a720fa6aed6a50a6dae2a6773d2c30c71be0eadbf2fb5dad6f906815a977a4081b239a06c4d087bcbb9b01a7aa8ffd8e4f0bb659cc2

    Score
    10/10
    xmrigminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner Payload

      miner

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks