Overview

overview

10

Static

static

10

8fbe10cf3e...87.exe

windows7_x64

10

8fbe10cf3e...87.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fbe10cf3ef8ec3647c675be8bcc4df37ad7d2dd464d9fc2c066b266caf9f687

  • Size

    2.3MB

  • Sample

    220516-n11f2schek

  • MD5

    04a2c96afa4a0ef1ccd41b91b25973a4

  • SHA1

    9ecd66d096984c73da9e3afdd8f88ca60c66217b

  • SHA256

    8fbe10cf3ef8ec3647c675be8bcc4df37ad7d2dd464d9fc2c066b266caf9f687

  • SHA512

    dff1b3e333245e0c12416a9563e9c0f27c81dc909cb41712207cfa676460f94676fa25b202665d36b2f520e6baa3d9f25b7d6275420d7d967f38d899b3256f2f

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      8fbe10cf3ef8ec3647c675be8bcc4df37ad7d2dd464d9fc2c066b266caf9f687

    • Size

      2.3MB

    • MD5

      04a2c96afa4a0ef1ccd41b91b25973a4

    • SHA1

      9ecd66d096984c73da9e3afdd8f88ca60c66217b

    • SHA256

      8fbe10cf3ef8ec3647c675be8bcc4df37ad7d2dd464d9fc2c066b266caf9f687

    • SHA512

      dff1b3e333245e0c12416a9563e9c0f27c81dc909cb41712207cfa676460f94676fa25b202665d36b2f520e6baa3d9f25b7d6275420d7d967f38d899b3256f2f

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks