Overview

overview

10

Static

static

10

805c081a70...b1.exe

windows7_x64

10

805c081a70...b1.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    805c081a70299c1752a5dc30a2eaf871e9a2063ec02a19928f64e6b1991b00b1

  • Size

    1.8MB

  • Sample

    220516-n41k8aaeb3

  • MD5

    0b807f4ceb346f590077f1fa60e8143a

  • SHA1

    26e6f84b5ab3d503921751610dcd5ae56dc6591b

  • SHA256

    805c081a70299c1752a5dc30a2eaf871e9a2063ec02a19928f64e6b1991b00b1

  • SHA512

    68aa21f0d01fd1f90bc6ef3672a02c6af78b8d511a2c97376a28c1e987628e7a6e42807d31823248680f0619c4f0ae87ff12b8502f630d30ff1248692f3c8cc9

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      805c081a70299c1752a5dc30a2eaf871e9a2063ec02a19928f64e6b1991b00b1

    • Size

      1.8MB

    • MD5

      0b807f4ceb346f590077f1fa60e8143a

    • SHA1

      26e6f84b5ab3d503921751610dcd5ae56dc6591b

    • SHA256

      805c081a70299c1752a5dc30a2eaf871e9a2063ec02a19928f64e6b1991b00b1

    • SHA512

      68aa21f0d01fd1f90bc6ef3672a02c6af78b8d511a2c97376a28c1e987628e7a6e42807d31823248680f0619c4f0ae87ff12b8502f630d30ff1248692f3c8cc9

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks