Overview

overview

10

Static

static

10

144cc3a8fa...a3.exe

windows7_x64

10

144cc3a8fa...a3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    144cc3a8fa6e86fc2d310cdfe34912b3b78acdc257aa0b4fd92150f70a3603a3

  • Size

    2.7MB

  • Sample

    220516-pspj9aecal

  • MD5

    0d4274d9d092b1c3ce1958302bcda9dd

  • SHA1

    d8440e6eb9c803447e13900061d96ef616690983

  • SHA256

    144cc3a8fa6e86fc2d310cdfe34912b3b78acdc257aa0b4fd92150f70a3603a3

  • SHA512

    a8da6546996afdf2a6e6c21b758eefa0ebb1d40a66595dca21600b9d97c0d32b158759215f46cf69b77e94b092f11406f88a37f9726e7fb411575edf6f8c60d1

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      144cc3a8fa6e86fc2d310cdfe34912b3b78acdc257aa0b4fd92150f70a3603a3

    • Size

      2.7MB

    • MD5

      0d4274d9d092b1c3ce1958302bcda9dd

    • SHA1

      d8440e6eb9c803447e13900061d96ef616690983

    • SHA256

      144cc3a8fa6e86fc2d310cdfe34912b3b78acdc257aa0b4fd92150f70a3603a3

    • SHA512

      a8da6546996afdf2a6e6c21b758eefa0ebb1d40a66595dca21600b9d97c0d32b158759215f46cf69b77e94b092f11406f88a37f9726e7fb411575edf6f8c60d1

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks