Overview

overview

10

Static

static

10

0f6a2396be...d4.exe

windows7_x64

10

0f6a2396be...d4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f6a2396be7e9800df4aa3edf660c6a8c6e4779e7ca984217e20f6c84ee3f3d4

  • Size

    1.7MB

  • Sample

    220516-ptt65abgb6

  • MD5

    03944243f6f1177426fc06b0b28ec311

  • SHA1

    cb99ffcfd19b2db58948218835d4aad7993328aa

  • SHA256

    0f6a2396be7e9800df4aa3edf660c6a8c6e4779e7ca984217e20f6c84ee3f3d4

  • SHA512

    09c1d1efc719fffcda51cc230e9e3a2e8eca5e0240072f053b763f556c126276bf723d1f274d98a356f3ed4a7bd878df7cb2d5f4292581ff649fe1ce121e35fd

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      0f6a2396be7e9800df4aa3edf660c6a8c6e4779e7ca984217e20f6c84ee3f3d4

    • Size

      1.7MB

    • MD5

      03944243f6f1177426fc06b0b28ec311

    • SHA1

      cb99ffcfd19b2db58948218835d4aad7993328aa

    • SHA256

      0f6a2396be7e9800df4aa3edf660c6a8c6e4779e7ca984217e20f6c84ee3f3d4

    • SHA512

      09c1d1efc719fffcda51cc230e9e3a2e8eca5e0240072f053b763f556c126276bf723d1f274d98a356f3ed4a7bd878df7cb2d5f4292581ff649fe1ce121e35fd

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks