Overview

overview

10

Static

static

10

0f41b9710e...ef.exe

windows7_x64

10

0f41b9710e...ef.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f41b9710edccce1549d83b3213c01707ab4c9f11171b4a7c8ec00dade41a5ef

  • Size

    1.9MB

  • Sample

    220516-ptxx1secem

  • MD5

    053e7e74dacad7fefd215789d7acbbaa

  • SHA1

    f8ea7c9c8ec5e80783338c700606a3896e72aeef

  • SHA256

    0f41b9710edccce1549d83b3213c01707ab4c9f11171b4a7c8ec00dade41a5ef

  • SHA512

    0585d5a9bebfc87948e32b565da80b30a7a1e77deff2b82ab724dc50611cf6573cc1932d2e9b13b3a615d84d779fb11742818515aeef58d373fb35cb26168ed2

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      0f41b9710edccce1549d83b3213c01707ab4c9f11171b4a7c8ec00dade41a5ef

    • Size

      1.9MB

    • MD5

      053e7e74dacad7fefd215789d7acbbaa

    • SHA1

      f8ea7c9c8ec5e80783338c700606a3896e72aeef

    • SHA256

      0f41b9710edccce1549d83b3213c01707ab4c9f11171b4a7c8ec00dade41a5ef

    • SHA512

      0585d5a9bebfc87948e32b565da80b30a7a1e77deff2b82ab724dc50611cf6573cc1932d2e9b13b3a615d84d779fb11742818515aeef58d373fb35cb26168ed2

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Blocklisted process makes network request

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks