Overview

overview

10

Static

static

10

13df3339bd...a0.exe

windows7_x64

10

13df3339bd...a0.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13df3339bd08c70fb5f232e283781cfa0c4161c295c1152b3a9ffcdd45af8aa0

  • Size

    1.4MB

  • Sample

    220516-psr1daecaq

  • MD5

    0e2a4bc17712d291cdd423ee24e6e756

  • SHA1

    cf0f0de1f410a318fe347a6f7d9bf8056a66a964

  • SHA256

    13df3339bd08c70fb5f232e283781cfa0c4161c295c1152b3a9ffcdd45af8aa0

  • SHA512

    3c50f666f0ec7b7f9ca7d22c8c19f737e52fc6663d6197b1a8636c46f3958eaf63aaaec93906b5b5289cae9532b0617a913124d52471670ee2ecb6124d8c3ee8

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      13df3339bd08c70fb5f232e283781cfa0c4161c295c1152b3a9ffcdd45af8aa0

    • Size

      1.4MB

    • MD5

      0e2a4bc17712d291cdd423ee24e6e756

    • SHA1

      cf0f0de1f410a318fe347a6f7d9bf8056a66a964

    • SHA256

      13df3339bd08c70fb5f232e283781cfa0c4161c295c1152b3a9ffcdd45af8aa0

    • SHA512

      3c50f666f0ec7b7f9ca7d22c8c19f737e52fc6663d6197b1a8636c46f3958eaf63aaaec93906b5b5289cae9532b0617a913124d52471670ee2ecb6124d8c3ee8

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks